[Backport staging-24.05] stdenv: make sure the env-vars file created is not world readable

[Backport staging-24.05] stdenv: make sure the env-vars file created is not world readable #759