Explicitly add the correct umask.

The build fails with umasks more permissive than the default.