Ensure that the .vault-token file writen by `vault login` always has the correct permissions and ownership. (#8867) (#8869)