Restrict permissions on output directory. We don't want all output files to be readable by the web server.