Add umask to 0022 to test to ensure certs are created with good perms