SGID on the /layers directory

[tylerphelan]

Description

When run in kubernetes, the layers dir gets the SGID bit set. Would the lifecycle ever be interested in removing this bit? Users were a little concerned seeing this bit set in images.

Proposed solution

Have the lifecycle remove the sgid from the layers dir

Describe alternatives you've considered

Don't do anything as it may not be a big risk

Additional context

kpack issue: https://github.com/pivotal/kpack/issues/1016

[natalieparellano]

@tylerphelan thanks for raising this - it seems reasonable for the lifecycle to remove this bit, but as this introduces a change in behavior it could benefit from an RFC. Would you be amenable to raising this? We could scope it to the team level to hopefully move it through faster.