diff --git a/roles/manage-container-images/tasks/main.yml b/roles/manage-container-images/tasks/main.yml
index bd7e9e75f6..64c88cb071 100644
--- a/roles/manage-container-images/tasks/main.yml
+++ b/roles/manage-container-images/tasks/main.yml
@@ -18,11 +18,12 @@
     src: "{{cert_src}}"
     dest: "{{cert_dest_dir}}/client.cert"
     owner: root
-    mode: 0600
+    group: "releng-team"
+    mode: 0640
 
 - name: install docker client key for registry
   copy:
     src: "{{key_src}}"
     dest: "{{cert_dest_dir}}/client.key"
-    owner: root
-    mode: 0600
+    group: "releng-team"
+    mode: 0640