local secrets store race in nextflow

ghsa-4cmm-q94h-8g5j in nextflow let a local user on shared filesystems race-read secrets created by nextflow secrets set due to a write-before-chmod permission window