diff --git a/roles/fedmsg/irc/tasks/main.yml b/roles/fedmsg/irc/tasks/main.yml
index 85d3055a09..67860a730d 100644
--- a/roles/fedmsg/irc/tasks/main.yml
+++ b/roles/fedmsg/irc/tasks/main.yml
@@ -28,7 +28,12 @@
   - restart fedmsg-irc
 
 - name: setup fas credentials config file
-  template: src=fas-credentials.py.j2 dest=/etc/fedmsg.d/fas-credentials.py
+  template: >
+    src=fas-credentials.py.j2
+    dest=/etc/fedmsg.d/fas-credentials.py
+    mode=0640
+    owner=fedmsg
+    group=fedmsg
   tags:
   - config
   - fedmsg/irc