Wrap new file creation in file.managed in more restrictive umask.

Refs #8590