The last login file should only be readwrite by that user