libcontainer: LockOSThread around Umask calls

[haircommander]

umask operates on a thread basis, and we risk leaking the umask to other routines if the go runtime interrupts.

Signed-off-by: Peter Hunt~ [email protected]