Make "state" directory non-readable

[parsley42]

From a running container:

$ ls -Fla
total 8
drwxr-xr-x.  1 daemon nogroup   84 Jun  3 19:06 ./
drwxr-xr-x.  1 root   root      19 Apr 30 13:40 ../
drwxr-x---.  8 daemon daemon   143 Jun  3 19:06 custom/
lrwxrwxrwx.  1 root   root      24 May 14 14:14 gopherbot -> /opt/gopherbot/gopherbot*
drwxr-x---. 25 daemon daemon  4096 Jun  3 19:07 history/
-rw-r--r--.  1 daemon daemon  2460 Jun  3 19:10 known_hosts
drwxr-xr-x.  4 daemon daemon    66 Jun  3 19:06 state/
drwxr-x---.  2 daemon daemon     6 Jun  3 19:06 workspace/

state should also be drwxr-x---.