hiera.yaml world-readable and strange ownership

root@elephant:~# ls -la /etc/leap/hiera.yaml 
-rw-r--r-- 1 leap-webapp leap-webapp 25686 Jul  5 05:45 /etc/leap/hiera.yaml

root@worm:~# ls -la /etc/leap/hiera.yaml 
-rw-rw-r-- 1 debian debian 11930 Jul  1 15:35 /etc/leap/hiera.yaml

we should provide a hotfix (before the audit) ?

(from redmine: created on 2013-07-09, closed on 2013-08-01)