security fix - don't allow leap_cli created files to be world/group readable.