use more secure permissions for cache directory