The file in which our Etherpad settings reside is templated with
sensitive data like an API key and DB password. Remove the world
readable bit from it, and also drop user/group write perms while
we're at it. Also switch the service's effective GID to match its
UID and make sure the config's ownership is set accordingly.
Change-Id: I65b70237b4bc8f4e63aa0b717702c124e01ed777
f75191dbd4