root should have 022 as default umask

otherwise any files it creates are writeable by all the users in the system