NEO: fix permission of instance templates when downloading them

This problem was not found during development because I used a local checkout
of slapos cookbook and these files were not downloaded but directly copied
from the disk.

In zc.buildout, the Download class should be changed to use something that
respects umask, instead of 'tempfile.mkstemp'.

software/neoppod/software.cfg

@@ -42,6 +42,8 @@ scripts =
 recipe = slapos.recipe.build:download
 url = ${:_profile_base_location_}/${:_buildout_section_name_}.cfg.in
 md5sum = 85e88660335bbdfb13ba9026c24858b0
+# XXX: following mode should be the default
+mode = 644
 
 [instance-neo-admin]
 < = cluster
@@ -56,7 +58,7 @@ md5sum = 2cba73dbfa3f6e1a60d54de3bae38fee
 md5sum = 70f7dfc268ceb677913c3a318656f834
 
 [template-my-cnf]
-recipe = slapos.recipe.build:download
+< = cluster
 url = ${:_profile_base_location_}/my.cnf.in
 md5sum = 38b4eb7225f9b7c18875b4d2ab398278