[NC] Restrict permissions on client migration key.

Fixes EUCA-6096.