reduce file privileges for new folders/files