initramfs has access rights 644

[felixauringer]

Everybody can read the initramfs which may be a problem because there is a keyfile embedded (see Arch Wiki. That's only a problem if somebody has access to the running system but it should be avoided nontheless. Therefore the access rights should be changed whenever the initrams is recreated.