Make sure exported certs are not world readable