Make ENV file readable only from dokku user. Closes #621