pki: install private directories not world readable

This will enable to drop the permission change at
setup.

Change-Id: I9928cff3f16633e2bea8064b6ee9672f5043fab0
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>