[CHEF-3413] make sure bootstrapping leaves data_bag_secret, validation, e...

http://tickets.opscode.com/browse/CHEF-3413

...tc only readyable by root