Steeltoe: TLS private keys written to /tmp with default permissions, never deleted (CVE-2026-50267) | HOL Guard CVE