ipsec: secrets shouldn't be world-readable

This patch makes sure we open /etc/ipsec.secrets for writing in 0600 mode. I noticed it was world-readable...