set default permission 0700 for backup directory

fixes CVE-2013-1425 (local information disclosure)