open permissions on authn configuration files; set owner of tmpdir for one-proxy correctly