Update heat.conf permission

To avoid unauthorized users to read secrete information in
heat.conf, heat.conf should be set as 640 instead of 644.

Fix bug 1370870
Change-Id: I02756cea10113ca89ddeaa9232d04c75380756e8