# what: the bws token written 644 instead of 600
# why:  any account on the box could then read the machine credential
# kills: the bws token is written 600
# run:  unit
<<<OLD
			chmod 600 "$BWS_TOKEN"
<<<NEW
			chmod 644 "$BWS_TOKEN"
<<<END