chef directory resource doesn't recursively apply permissions