Packaging fixes for Chef 11.16.x

/cc @lamont-granquist @adamedx 
Is it ever possible for `root` to belong to a group besides `root`?