Give the setIO permission
Set FILE_UPLOAD_PERMISSIONS

this ensures that uploaded files are not world-readable, in case the
system is accessibly by untrusted users.