Reset the umask when making the environment safe.

Otherwise an attacker could set the umask and get root to write
world-writable files, which could then have been exploited within
the container (e.g. by getting polkit to authorize a privilege
escalation).