I fully support this feedback.  Any file containing passwords should be appropriately secured.  0640  setting is appropriate - please would you change this.