root@idp:~# chown root:tomcat /opt/shibboleth-idp/credentials/secrets.properties
root@idp:~# chmod 640 /opt/shibboleth-idp/credentials/secrets.properties