fix up umask to allow other users read access
be more robust to strange tokens