nginx.conf must only be accessible to user root