Set secure permissions on OAuth token file