bkernel: set pesign perms locally now.
    
    This used to get set in pesignd when it started, but upstream has
    dropped that because it's more of a local config issue.
    
    Signed-off-by: Kevin Fenzi <kevin@scrye.com>