Create volume dirs as 700

pkg/selfcontain/config.go

@@ -55,7 +55,7 @@ func (c *Config) toLibcontainer() (*configs.Config, error) {
 	mounts := []*configs.Mount{}
 	for dest, source := range c.Mounts {
 		c.Logger.Info("setting up mount", "source", source, "dest", dest)
-		err := os.MkdirAll(source, 0o755)
+		err := os.MkdirAll(source, 0o700)
 		if err != nil && !os.IsExist(err) {
 			return nil, err
 		}