Modify shib-keygen to create the certificate key group-readable