limit create file permissions

Be safe by default, create files so that other users can't read them,
at least until the original permissions are set.
Merge pull request #126 from dfries/master

limit create file permissions