Mailboxes are being created with 644 permission


I installed Virtualmin on an Ubuntu 14.04 LTS server. Everythings seems to work fine, but I noticed mailboxes in /var/mail/ have 644 permission so they are publicly readable. I manually changes permission, but how do I prevent new users’ inboxes are created with these wrong permission?