Turns out this was caused by a stricter umask meaning global read wasn't allowed on the file. Vanilla setup seems to work ok, so closing.
Turns out this was caused by a stricter umask meaning global read wasn't allowed on the file. Vanilla setup seems to work ok, so closing.