lock down torrc.additions permissions