eal: tighten permissions on shared memory files