set a more secure umask

kinda not so sure about 022, espec. with messing around with config
files so much -- 027 might only be necessary, but w/e, going with 077.

Signed-off-by: Ben Orchard <thefirstmuffinman@gmail.com>