it's logger further down (can't log here, no logger yet, but I want to set the umask as early as possible)