Eniforce 0644 permissions on cacert.pem

Otherwise non-root users will get certificate verification failures when
using SSL/TLS.