Change in ovirt-engine[master]: pki: enforce lock file permissions same as ca private key