$perm=400 if $file=~/catalina\.properties/ || $file=~/\.key$/ || $file=/tomcat-users\.xml/;