node-installer: write kata config with less perms

Signed-off-by: Paul Meyer <[email protected]>

nodeinstaller/node-installer.go

@@ -183,7 +183,7 @@ func containerdRuntimeConfig(basePath, configPath string, platform platforms.Pla
 	if err != nil {
 		return fmt.Errorf("marshaling kata runtime config: %w", err)
 	}
-	return os.WriteFile(configPath, rawConfig, os.ModePerm)
+	return os.WriteFile(configPath, rawConfig, 0o644)
 }
 
 func patchContainerdConfig(runtimeHandler, basePath, configPath string, platform platforms.Platform, debugRuntime bool) error {