Run commands in an unencrypted tmp copy.
Merge branches 'fix-python', 'run-unencrypted' and 'umask' into integration