Why is at.deny mode 600 by default? And should cron.deny, if present have the same mode for similar reasons? -- see shy jo