FIX: restrictive permissions are default
TEST: check permissions of imported key files
FIX: check more careful for existing keys
import masterkey if available in `cvmfs_server import`