makepem: create pem only rw for the user, on non-win32

Without this, careless users running "--makepem" end up with a private key readable by anyone in the system.

I used the check for _WIN32 because I don't know what's the best check to use, neither I know how to use autotools.