default umask should be less permissive
Point to the right manual page for discussion about start up options.