delay chmod of copied files to check_perms()

* salt.utils copyfile() now creates 0600 files when copying. Previously it was
  changing file mode before any state mode was known (if any).
* check_perms is called after the file copy and can decide to apply mode or
  umask based permissions.