make key files readable only by user