Use mode 600 on the TLS certificate