Make sure that only ZNC can read its certificate

To bring this certificate in line with how those in ssl.yml are managed.