"chgrp puavo /state/etc/puavo/ldap/password" at boot time
in case the puavo-group has changed gid (it is currently
dynamically allocated).