Add configurable ownership and permission defaults for shared DH
parameter directories and files.
Set shared DH parameter defaults to root:root, directory mode 0755, and file
mode 0644 so non-root TLS services can traverse the directory and read DH
parameter files.
Enforce configured ownership and modes after synchronization and document the
security boundary between public DH parameters and TLS private keys.