Set read-write permissions for the Hex credentials file when writing

[lpil]

Currently we use the default umask, which may include it being world-readable. A best practice would be to set permissions to read-write for the user (0600 on Unix-like systems).

[bala-bhargav]

@lpil can i try this issue??

[GearsDatapacks]

Hello! #5431 is already being worked on to solve this issue, so it would be better if you picked something else.

[pushcx]

@bala-bhargav You can take it. None of those tests failed for me locally and the reviewer wanted a test I already said I don't know how to write.

[salespaulo]

Hi! I'd like to work on this issue.
My plan is to add a small Unix-only helper for setting 0o600 permissions and use it when writing the stored Hex OAuth credentials file. How are you planning to do it @bala-bhargav ?

[bala-bhargav]

Hi @salespaulo! I'm already working on this issue — @pushcx handed it off to me . I've got a working implementation with a
make_private helper that sets 0o600 permissions after writing the credentials file, along with a test. I'll be opening a PR shortly!