make authorized_keys file mode less permissive.

authorized_keys is created as world-readable; that won't work by default.