Most devices should be limited to mode <tt>640</tt>, unless the group
is untrusted, where group read access may need to be limited.
<tt>/dev/null</tt> is the exception, and it should be mode
<tt>777</tt>.