datomic_console.pill should be mode 640 since it contains AWS credentials