Locking down permissions on settings.php