discover: Set umask before mkstemp()