Removed group write permission on StartupItem and LaunchDaemon