pbs: be more careful to set umask

It doesn't always seem to get set, and don't want to have to chmod
everything we write.