ipsec: secrets shouldn't be world-readable