Tighten file permissions (no world read)
Cosmetics, and add a default for netmask