more restrictive permissions for files in tarball
bump version