During refactoring of configure.ac the default PTY mode was changed from 0620 to 0622 without documenting this change. Packagers that don't pass an explicit `--with-pty-mode=0620` will end up with world-writable PTYs. Revert the default back of 0620 to provide a safe default again. CREATE(Triage):(User=myu2) CVE-2025-46803 (https://nvd.nist.gov/vuln/detail/CVE-2025-46803)