create POSIX shared memory with mode 0600, instead of 0644

SysV shm segments are created with mode 0600.  Now the /dev/shm files
backing the POSIX shm have the same protection.