bootstrap.sh: Don’t make the home directory world-readable

Fixes #159.