[signond] Set permissions for default storage path and run signond with invoker to launch with privileges.