Also the image ID folder for docker squash.
This method is only called in 2 places: once for the ACI rootfs, and once
for squashing docker images. The previous (0644) permissions could
theoretically have been depended on by someone, but it is doubtful.
fixes#802