dnsmasq: install /etc/hotplug.d/ntp/25-dnsmasqsec world-readable