it seems we have to check the permissions after each update, probably because nfpm defines these dirs as empty folders