Fix permission of public files in upgrader
    
    Make CA bundles, certs, and cert directories world-accessible in
    upgrader.
    
    Fixes: https://pagure.io/freeipa/issue/7594
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>