Made auth file non-readable by user.
Needs to be tested on windows though