stricter file permissions for new files