Set CA PEM files permissions to 644.

There is nothing secret in the CA files.  It's just the server
certificate.  Having them as 640 just makes life annoying for testing.