Files that contain encoded passwords need to be protected using file system permissions. These files include the following:
domain-dir/master-password
This file contains the encoded master password and should be protected with file system permissions 600.
Any password file created to pass as an argument by using the --passwordfile argument to the asadmin utility should be protected with file system permissions 600.
For instructions, see To Set a Password From a File.