Added fix-perms.sh to repair permissions according to the way that works for me -- owned by root, liberal owner and group permissions, and user acl for actual users (www-data and www-dev).