Add fabtools.files.umask()
Fix require.file ownership and permissions with use_sudo=True

If use_sudo is True, then the remote file will now be owned by root,
and its mode will reflect root's default umask.