enhanced default configuration

I noticed /etc/ being chmod'ed when the $keys_file is located at "/etc/ntp.keys". The original configuration causes permissions in /etc/ to be recursively changed. I've mitigated this by checking if there are at least 2 directories above the $keys_file (the $keys_file should at least be in /etc/ or /usr/local/ if it's custom compiled). Furthermore changed the default permissions from 0755 to 0640, since the execute bit automatically set by puppet on directories. Usually the service group of this daemon is named 'ntp', as such changed the group. Is this a welcome contribution right now?