Very good catch @ZAM-. We should just be using at `0600`, which allows owner read/write only. `0777` is a huge security risk.