Ensure ca cert is accessible by the puppet group

When the umask on the system is set to 0077, the puppet cert generate command sets the files to only be readable by the user.  Since we are not controlling the individual files, the easiest to way to set the permissions is to run with the a more global umask.