IOC should not try to change snap file permissions
The user running IOC typically doesn't own the snap files, so IOC can't change file permissions. IOC should produce an error if the permissions are not set correctly (and die, perhaps?) rather than try to set permissions.
Sysadmins or users should be responsible for setting permissions.