Certbot-auto, letsencrypt-auto has insecure permissions

Have you read the link presented in the error message itself? Certbot-auto deployment best practices

If so, what did you try from those best practices?