[signond] Set permissions for default storage path and run signond with ...

...invoker to launch with privileges.