diff --git a/roles/fedimg/tasks/main.yml b/roles/fedimg/tasks/main.yml
index b2e9d1d46e..4917c7ccfa 100644
--- a/roles/fedimg/tasks/main.yml
+++ b/roles/fedimg/tasks/main.yml
@@ -45,7 +45,7 @@
 
 - name: copy keys into pki directory for staging
   copy: src={{private}}/files/fedimg/{{item}} dest=/etc/pki/fedimg/{{item}}
-        owner=fedmsg group=fedmsg mode=0100
+        owner=fedmsg group=fedmsg mode=0400
   with_items:
   - fedimg-dev
   - fedimg-dev.pub