Config saved with default umask

The Config.save method serializes the config object to disk, with permissions defaulting to the current umask, potentially exposing any secrets stored in the config to all accounts on the server.

core.host.write_file() can be used to safely write the json to disk, specifying permissons such that only the root user can read it.