modify permissions on a keyring by reading the current permissions, anding the bits with the given mask (clearing permissions) and setting additional permission bits.