mds/rgw: created /var/lib/ceph/[mds|rgw]/<mds>/keyring owned by root and world readable

For mds and rgw:
From Jewel on it should be owned by ceph:ceph and generally it should be mode 600.

I believe this is also wrong in latest ceph-deploy.
