Title: #457: ipa: Removal of umask(0) in selinux_child
We're fine about RHEL-6 as long as we don't explicitly backport it there.
I'm a little bit worried about openSUSE/SLES as they may use SELinux. Debian, AFAIR,
doesn't use SELinux (but I'd like to have Timo's confirmation here).
See the full comment at https://github.com/SSSD/sssd/pull/457#issuecomment-346335280