app: Database and other files should be 600/700 #2845
Description
In the app, the database and other files we create should have permissions mode 600 or 700, i.e. not group-readable nor world-readable. The client sets this at creation time and sets a umask accordingly.