p11child: set restrictive umask and clear environment
    
    https://fedorahosted.org/sssd/ticket/2754
    
    Before doing any calls, set a very restrictive umask and clear
    environment variables to harden p11child execution.
    
    Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>