Windows cf-serverd grants access to root. Redmine 4822.

preexisting, CFEngine has never taken into account group ownerships.