For file-based keystores, the keytool utility should create each new keystore with read/write permission by owner and inaccessible by others.

For example, on a Posix file system (Solaris/Linux/Mac) this is equivalent to chmod 'rw- --- ---' permissions.