Directory defaults to 0777
Deny traversal without execute permission
Deny read without permission
Only set mode if provided
Deny write without permission