Be more strict about file permission masks