This file contains sensitive information like passwords, and should therefore not be world readable. Two proposed changes : 1. Change mode to `0640` 2. Set `show_diff => false` so changes don't appear on stdout