activation scripts: proper file permissions

services/soulseek.nix

@@ -17,6 +17,8 @@ in
       #!/bin/sh
       rm -fr ${slskd_env} || true
       cp ${../secrets/slskd_env} ${slskd_env}
+      chmod 0500 ${slskd_env}
+      chown ${config.services.slskd.user}:${config.services.slskd.group} ${slskd_env}
     '';
   };
 

zfs.nix

@@ -12,6 +12,8 @@ in
       #!/bin/sh
       rm -fr ${zfs-key} || true
       cp ${./secrets/zfs-key} ${zfs-key}
+      chmod 0500 ${zfs-key}
+      chown root:wheel ${zfs-key}
     '';
   };