FL-478: set umask to 002 to preserve group permissions when buildbot/metro do their thing