Better error messages for permission denied cases.

Address keybase/keybase-issues#661