allow fail2ban to write db file