chmod not works in new version of cygwin, use setfacl instead. To set to 644 (rw-r--r--) use next:

setfacl -s u::rw-,g::r--,o:r-- vars/secure.yml