Kubernetes can set a mode using "defaultMode" but cannot mount the file with
other uid than root.
So we have to mount the secret and copy it with good mode and ower in
/etc/cubicweb.d/fresh/cwclientlibrc...