chmod remote file copied by ssh to be all-readable
This is for the case where remote umask is not world-readable:
something like 0027 or even 0077 (not even group-readable).
Remote file copied to /.well-known/ should perhaps be world-readable.
It really depends on web server configuration but we assume the most
common configuration.