Restrict permission of credentials file