Agree, the tests that `withumask` are invoked should be here, and validation should be in the type. I didn't catch that this did update both exec and file.