Right now /etc/openhpi/openhpi.conf file is packaged with 0640 permissions and root,root access. But daemon does not check for these permissions before proceeding. More over it accepts a different config file with -c option. Daemon needs to check the permission of the config file before proceeding. If the permissions are not set correctly it needs to exit.
This bug, suggested by Anton, is something all of us agree on.