Using ansible to upgrade ansible in envronment with restrictive umask

We install ansible via pip
We can’t use the ansible pip module to ensure the desired version is installed, as the restrictive umask breaks the permissions on the ansible files in /usr/lib/python2.6/site-packages …
The pip module does not allow us to override the umask

We can use the shell module to elevate to root, change the umask, and pip install the desired version however, we can’t write that shell command to be idempotent.
The desired version right now is 2.0.0.0-1 but ansible --version and pip show both return 2.0.0.0 as the current version when 2.0.0.0-1 is installed

suggestions? We don’t have any access to production so the upgrade must be automated via ansible code