Explicitly add the correct umask.

The build fails with umasks more permissive than the default.
Start jails/plugins on volume unlock

Ticket:	#3234