**Opt-in required**

The STIG requires that daemons have their umask set to ``027`` or ``022``.
Since changing umasks can disrupt some systems, this is an opt-in change.

Deployers that want this change applied to their systems must set the Ansible
variable ``security_umask_daemons_init`` to ``027``.