[PUP-1120] Fix private key permissions for group read

Have the hostprivkey saved with 0640 permissions to allow
the service group to be able to read by other puppet services
like PuppetDB and Foreman.