Fix security hotspots related to file permissions and capabilities

Fix file permissions and capabilities in tape server and elsewhere, using a least privilege approach.