this should be configurable. the default should be 0750