testing: tighten up the umask before sshd launch, so that the socket is not exposed...