Chmod the irods.keytab file so it is only readable by the irods service account