move one-proxy to non-root user; correct directory permissions