Uses umask to avoid creating world-readable files.
Merge branches 'fix-python', 'umask' and 'run-unencrypted' into integration