`chmod` the config file to rw for user only

Prevent other users from potentially stealing the token.