Sensitive data stored in world-readable files

[shuse2]

Expected behavior

When a file is stored with fs.write or fs.writeJSON, it should only be accessible to the creator of the file.

Actual behavior

When a file is stored with fs.write or fs.writeJSON, it is accessible from other users on the machine.

Steps to reproduce

try passphrase:create to create new passphrase on a file and check from other users

Which version(s) does this affect? (Environment, OS, etc...)

6.0.0-beta.0-