m4: Tighten up permissions to appease CTS

Change-Id: Ia2848de002d1a7fa3e9c5cf0f1ac93b05b76926f