Well, the problem with asking me what the right thing to do is that I
think the old behavior of just using the default os umask makes the most
sense.  I think we should figure out who made the original change in
behavior and ask them what the right thing is to do and why.  I'll see
if I can dig up the 'who' tomorrow.