umask the server process to lock down file visibility.