As both the varnish working directory and the secret file may
pre-exist, this ensures permissions remain restrictive on it.