added a sanity check that private ssh key permission should be 400 (or else ssh and scp fail later in some cases without warning