exec, file: set umask before mkstemp