keys.json should be chmoded to -rw-------

[cbare]

Since this holds credentials maybe adding path.chmod(0o600) would be safer, here:

llm/llm/cli.py

Lines 512 to 515 in df7d248

	path = user_dir() / "keys.json"
	path.parent.mkdir(parents=True, exist_ok=True)
	if not path.exists():
	path.write_text(json.dumps(default))

[simonw]

This is a good idea.

[simonw]

Manually tested this like so:

$ ls -lah ~/Library/Application\ Support/io.datasette.llm/keys.json 
-rw-r--r--  1 simon  staff   822B Dec 14 19:27 /Users/simon/Library/Application Support/io.datasette.llm/keys.json
$ mv ~/Library/Application\ Support/io.datasette.llm/keys.json /tmp  
$ llm keys
No keys found
$ llm keys set openai
Enter key: 
$ ls -lah ~/Library/Application\ Support/io.datasette.llm/keys.json  
-rw-------  1 simon  staff   101B Jan 26 13:23 /Users/simon/Library/Application Support/io.datasette.llm/keys.json

I confirmed that running prompts still works with the 600 permission file.