Fix a long-standing bug where the signing keys generated by Synapse were world-readable. Contributed by Fabian Klemp.