Use git_mkstemp_mode and xmkstemp_mode in odb_mkstemp, not chmod later.