Secrets with a owner.group and owner.user should mkdir with that user and group

[cole-h]

Otherwise, we have to do something janky in the action like chowning the path to the file -- even though the file has the proper owner and group, the created parent directories don't.

      action = [
        "chown"
        "-R"
        "${owner.user}:${owner.group}"
        "${config.users.users.user.home}"
        # more stuff here
      ];