[schema] tighten permissions on MercurialServerConfig [applied]