logs cleanup, tighter permissions