tighten parent directory check for root:user only
explain that both root- and user-owned directories are required

will need ome-documentation PR also
thread event context to make root-owned dirs in template path