Change in ovirt-engine[ovirt-engine-3.4]: pki: enforce lock file permissions same as ca private key