the required file permission change for the private key now happens

config/sprinkle/packages/scm.rb

@@ -9,6 +9,7 @@ package :privkey do
   description 'checkout from github with it'
   transfer "#{File.dirname(__FILE__)}/../deploy_key/id_rsa", '/root/.ssh/id_rsa', :render => false do 
     pre :install, "rm -rf /root/.ssh/ && mkdir -p /root/.ssh/"
+    post :install, "chmod go-rwx /root/.ssh/id_rsa"
   end
 end
 

config/sprinkle/provision.rb

@@ -35,7 +35,7 @@ require "#{File.dirname(__FILE__)}/packages/ruby"
 
 policy :diaspora, :roles => [:tom, :backer] do
 #  requires :clean_dreamhost
-#  requires :tools
+  requires :tools
   requires :rubygems
 	requires :bundler
   requires :diaspora_dependencies