Fix CI failures that happen due to docker-avoidance.

It's an interesting side-effect that running in Docker seems to work
better, maybe due to running as root?

Try to emulate what seems to be happening on CI by changing the desired
umask, which usually does the right thing when running locally.

Author: Byron