CVE-2013-4476: samba-tool provision: create ${private_dir}/tls with mode 0700