- don't twiddle ownerships until after we get AFS tokens
    - use the current time instead of the issue time when storing v4 creds, since
      we don't know the issuing host's byte order
    - need to close the file when we succeed in fixing permissions (noted by
      jlkatz@eos.ncsu.edu)