Wrap file creation in file.managed in more restrictive umask.
Merge pull request #8641 from cachedout/#8590

Wrap new file creation in file.managed in more restrictive umask.