base-files: generate config files with correct permissions