Secrets with a `owner.group` and `owner.user` should `mkdir` with that user and group

[cole-h]

Otherwise, we have to do something janky in the action like chowning the path to the file -- even though the file has the proper owner and group, the created parent directories don't.

      action = [
        "chown"
        "-R"
        "${owner.user}:${owner.group}"
        "${config.users.users.user.home}"
        # more stuff here
      ];