`/efi/loader/random-seed` is world readable

[h8d13]

Steps to reproduce:

• Create the esp part on /efi

Reported by journalctl

I believe the fix is to use ('fmask=0077', 'dmask=0077') options for any esp marked part