Make sure exported certs are not world readable
Merge remote-tracking branch 'upstream/master'