- remove read permissions for other users on local sqlite database
as it may contain passwords (bnc#747833, CVE-2012-0863)
- don't add built-in CA certificates (bnc#660784)