Configuring default umask?

Hi all, I realize changing the default umask only has limited benefit, but nonetheless I would like to set it to 077.

I’ve tried everything I can think of - all the profile config files in my home directory, the login defaults configuration file, etc, yet nothing seems to work.

What am I missing? TIA

I haven’t found any single place to change the default umask for everything. Maybe the post promising place would be PAM. But I haven’t found a way to implement it without breaking too many things.