group->user dependency, more restricted home dir permissions