Set umask before mkstemp for those systems too silly to get it right.