`install` copies the files before setting their mode, so there could be a breif window where the secrets are readable by other users without a strict umask.
*** NixOS *** NixOS is a Linux distribution based on the purely functional package management system Nix. More information can be found at https://nixos.org/nixos and in the manual in doc/manual.