Avoid world-readable disk files being created as suggested in #416 by setting an umask to strip world permissions as well as group write/exec permissions before calling alloc_image.
Avoid world-readable disk files being created as suggested in #416 by setting an umask to strip world permissions as well as group write/exec permissions before calling alloc_image.