Using umask while generating SSL certificates (carnet-generate-ssl).
-rwxr-xr-x 3570 carnet-generate-ssl
-rw-r--r-- 560 carnet.conf
drwxr-xr-x - debian
drwxr-xr-x - templates