Tarsnap key should be 0600. Resolves #321.
Restrict permissions on Postgres backups files. Resolves #322.