Override root's umask with an "always correct" one

having a strict umask (such as 077) typically results in e.g. /etc/resolv.conf being mode 600 and networking not working for anyone but root. Or even worse: the rootfs directory is created mode 700 and then everything (except by root) errors out.