On RHEL, PAM is used, so you could try using `pam_umask`
Try putting this in `/etc/pam.d/crond`
session optional pam_umask.so umask=0022
Naturally, this is untested, and may very well break assumptions made by various applications.