Secure host file permissions

* added in missing recursive flag to the chmod command used to remove
extraneous permissions from CURATED_DIRS
* added commands to change permissions for manifests and configurations
that are copied to the host

Change-Id: I174db09061c3162db11dd976a55132f5fad7a80d

promenade/templates/include/up.sh

@@ -23,7 +23,7 @@ echo "{{ encrypted_tarball | b64enc }}" | base64 -d | {{ decrypt_command }} | ta
 set -x
 
 for DIR in "${CURATED_DIRS[@]}"; do
-    chmod go-rwx "${DIR}"
+    chmod -R go-rwx "${DIR}"
 done
 
 # Adding apt repositories