Thanks. Is there a way to change the conservative default? I will need to repeat the setup on another machine like that and I’d love to have a reproducible approach.
update: Just to confirm. The umask 0002 set in the service - does it play any role at all?