# /home/$USER/ must not have group write permission.

# ~/.ssh/ should have permissions 600.

# ~/.ssh/authorized_keys should not have group write permission;
# Permissions 600 is preferred for this file.