What if instead of doing this, just have the exec have `user => bind`, then the file will have the right permissions all the time.