Drop the deployer `root` should do this

That's the original permissions.
It's a read-only-for-anyone-but-root place
I don't want to tip over debian conventions for this, otherwise, please go to /adm