IMA: remove read permissions on the ima policy file