chrony.keys file should not be world readable

Just ran into this issue in our environment with Chrony.

The key file with sensitive information should by default be protected. Packages default to `0640` octal mode.