Strip other rx perms on pid dir/file

This is to prevent an unrelated, unprivileged user on the same
system from acquiring a readlock on the pidfile during a restart
race, effectively denying the real daemon the ability to start.