They should not be, as they have secret information in them. We should be ok since access to the instance is still restricted, and everyone there has root. So this is not immediate priority but should be fixed (in the puppet module that creates those files).

Version: unspecified
Severity: normal