Insecure default permissions for history file

[hrak]

The history file gets created with default permissions (before applying umask) of 0666, which, assuming a default umask of 022, leaves the history file world readable. This could result in sensitive information being exposed. A better default would be 0660.

[wader]

Hey, there is a bit more active fork at https://github.com/ergochat/readline which seems to have the same issue https://github.com/ergochat/readline/blob/master/history.go#L112 ping @slingamn

Can also confirm that for https://github.com/wader/fq that uses the egochat fork the history file ends up readable by others, but luckily in a $CONFIG/fq directory not accessable to others.