Make sure plugin_conf_dir is not world readable

Some plugins configuration can include sensitive datas
(passwords, tokens...). There's no legitimate reason for other users to
sneak in those config files.
Merge pull request #160 from txaj/fix-perms

Make sure plugin_conf_dir is not world readable