make key file private

private key files should not be world-readable which would be bad for security