New command line switch --relaxPermChecks is introduced. If it is specified then permission checks on files specified with --keyFile and --encryptionKeyFile are modified:
if such file is owned by root user then read access for users in the group owner is allowed.
Thus modes like 0440 or 0640 are allowed. (Without --relaxPermChecks or when file is not owned by the root user only modes 0400 or 0600 are allowed).