Some files contain encoded passwords that need protecting using file system permissions. These files include the following:
domain-dir/master-password
This file contains the encoded master password and should be protected with file system permissions 600.
Any password file created to pass as an argument using the --passwordfile argument to asadmin should be protected with file system permissions 600.