Make sure plugin_conf_dir is not world readable

Some plugins configuration can include sensitive datas
(passwords, tokens...). There's no legitimate reason for other users to
sneak in those config files.