fix: ensure secure permissions on initial file creation and existing files