Comment 17 for bug 1768340

Be advised that it is dangerous to use fscrypt without umask 077, as any user can read the contents of any file you access even if they don't have the security token.

https://github.com/google/fscrypt/issues/132