added settings for better-header. retabbed
Fixed PASSWORD_STORE_UMASK to a meaningful umask value