Protect sensitive config files from read (fixes #4)