Don't make config.yml world readable
Merge pull request #223 from michaelmior/config-permissions

config.yml permissions