fix permission for crl file