tor-gencert should create files with proper permissions
tor-gencert creates files with the default mode. It should probably ensure that the private key files are created in such a way that they are not world or group readable
[Automatically added by flyspray2trac: Operating System: All]
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information