default chmod 400 on all created files