Accept root-owned directories for settings

Prior to this change would require directories to be owned by the service user, but installing them read-only and owned by root is a sensible deployment strategy.

Addresses: #947 (closed)