Revert "s4:tls_tstream: allow mode of SSL keyfile to be 0400, not only 0600"