fixed permissions on the insecure key at runtime