I'm sure I didn't ask for 666. 444 as upstream does it should be fine as well as root has CAP_DAC_OVERRIDE.