Wrap highstate.cache.p in restrictive umask.
Merge pull request #9063 from cachedout/#6764

Wrap highstate.cache.p in restrictive umask.