please put safer permissions on every keyring not created by ceph-deploy