Ansible turned 0640 into 420 and 0750 into 488, only one of which are
valid file modes.  Quotes prevent it from doing so too early.
Fixes d2f1595c.