use adjust_permissions function in Application.postproc to set permissions;

both when a group is specified (no access for others), and without (remove write permissions for group/others);
add stub config parameter for specifying that install dir should be made read-only after installation, and make that changes if the EasyBuild config dictates so