A security audit reveals that a server's /etc/shadow file is readable by all users. Which command would correctly fix the permissions?