Harden filesystem permissions (paranoid mode)

This sets safe and proper directory and file permissions. See https://drupal.org/node/244924