add umask to shell provisioner