shlib.sh: make sure a sane umask is in effect