The secret key that encrypts the backups should not be world readable.

I do this after checking if the secret key needs to be created to fix this problem on all existing installations.