Update dist.xml

The default credential file permissions need to be 600, to prevent local hacker - GEN 007