Standardize permissions to 644