Fix default permissions for certificate files