be explicit about mode on /etc/mcollective/*.pem