This prevents the cookbook from changing valid permissions on the working dir like this:

directory[/var/spool/rsyslog] action create
  change owner from 'syslog' to 'root'
  change group from 'adm' to 'root'