set restrictive permissions on account config files when possible (closes #7)