fix(auth): close Windows remediation review findings

tools/tht/internal/backup/create_test.go

@@ -171,6 +171,7 @@ func TestCreateReferencesAuthFilesByDefaultAndArchivesThemOnlyWithSecretCustody(
 	if err := os.WriteFile(usersPath, []byte("users:\n  - passwordHash: must-not-be-archived-by-default\n"), 0o600); err != nil {
 		t.Fatal(err)
 	}
+	prepareBackupFixturePrivatePaths(t, []string{authDirectory}, []string{authPath, usersPath})
 	fixture.installation.Authentication.ConfigDirectory = authDirectory
 
 	defaultOutput := filepath.Join(t.TempDir(), "default.zip")
@@ -781,6 +782,7 @@ func newBackupFixture(t *testing.T, profile string) *backupFixture {
 		},
 	}
 	fixture.writeEnvironment(t)
+	prepareBackupFixturePrivatePaths(t, []string{descriptorDirectory, secretDirectory}, []string{environment, secretPath})
 	currentImage := fixture.installation.CurrentImageOverridePath()
 	if err := os.MkdirAll(filepath.Dir(currentImage), 0o700); err != nil {
 		t.Fatal(err)