027 is the correct umask

Thought I tested this with 047 and it was what I wanted.  Apparently not.  Feeling silly.

Change-Id: Ieaab7bc9b40b18599d236bc8084f26e1be3cf981