Hardening keyfile permissions and adding service management