Explicitly set permissions for certs config.

playbooks/roles/certs/tasks/deploy.yml

@@ -3,6 +3,9 @@
   template:
     src: "{{ item.src }}"
     dest: "{{ certs_app_dir }}/{{ item.dest }}"
+    owner: "{{ certs_user }}"
+    group: "{{ common_web_user }}"
+    mode: "0640"
   with_items:
     - { src: 'certs.env.json.j2', dest: 'env.json' }
     - { src: 'certs.auth.json.j2', dest: 'auth.json' }