--export-config uses default file permissions

The file created contains passwords and the default umask at that point grants read access to all users. The file should be created with read and write permissions to the user and the group.