Currently the octavia::certificate class installs the certificate files with mode 0755. However this is inappropriate because - The certificate files don't need x bit - The certificate files, especially the private key file, should not be leaked
Currently the octavia: :certificate class installs the certificate files with mode 0755.
However this is inappropriate because
- The certificate files don't need x bit
- The certificate files, especially the private key file, should not be leaked