Since calls to op-mode commands are done through root, a remote file downloaded in this manner ends up with root:root ownership and 600 permissions. (Local copy operations still preserve the attributes.) Ideally it should use the user's own uid:gid and maybe something like 640 by default. For FTP, TFTP and HTTP, this is just a matter of setting a umask and calling chown(2), but we should consider copying over the remote stat(2) values for SFTP.