Wrap highstate.cache.p in restrictive umask.

Refs #6764.