tl;dc = mount as 0555 instead of 0550
The Operator sets the script permissions for the tls passphrase script which is run by Couchbase Server. The best practice is to use securityContext.runAsUser: 1000 which mounts the script as couchbase user. But this isn't required and when omitted the script is mounted as root and unable to run. So we need to give public users read & execute, and this is fine as nothing sensitive is in this script.