puppet-lint recommends '0644'