dnsmasq: tighten config file permissions