Some people use umask 077 (like me), and it doesn't seem to work. I tried with umask 022 and it worked just fine, so I think we should set the default umask in the script. It would be nice if we can figure out something stricter than 022 as well.