The `http_secret` generated by `roles/hadoop/common/tasks/kerberos.yml` should not be readable by everyone (`444`) .