diff --git a/tasks/fedmsg_base.yml b/tasks/fedmsg_base.yml
index d4ac9dd3d4..89381c4e1b 100644
--- a/tasks/fedmsg_base.yml
+++ b/tasks/fedmsg_base.yml
@@ -59,7 +59,7 @@
   copy: >
     src=$private/files/fedmsg-certs/keys/{{item['service']}}-{{ansible_fqdn}}.key
     dest=/etc/pki/fedmsg/
-    mode=644
+    mode=0640
     owner={{item['owner']}}
     group={{item['group']}}
   with_items: ${fedmsg_certs}