associated messages file has world-writable permissions, then any local user could
modify the messages file to change its contents, without going through the intended
web interface. The weak permissions have defined a control sphere that is too broad
because it includes unexpected actors (i.e., local users.)