corrected file permissions
used the defined file permission mask when generating the crypt config