Ensure secret keys are readable/writeable only by file owner.

closes #1