Security fix: chmod 644 files