diff --git a/playbooks/groups/releng-compose.yml b/playbooks/groups/releng-compose.yml
index 8474051fdd..90879c4dc4 100644
--- a/playbooks/groups/releng-compose.yml
+++ b/playbooks/groups/releng-compose.yml
@@ -36,6 +36,7 @@
   - role: keytab/service
     service: compose
     host: "koji{{env_suffix}}.fedoraproject.org"
+    owner_group: releng-team
   - role: keytab/service
     service: mash
     host: "koji{{env_suffix}}.fedoraproject.org"
diff --git a/roles/keytab/service/tasks/main.yml b/roles/keytab/service/tasks/main.yml
index a98c89604f..6ccc61e703 100644
--- a/roles/keytab/service/tasks/main.yml
+++ b/roles/keytab/service/tasks/main.yml
@@ -149,7 +149,7 @@
   - krb5
 
 - name: Set keytab permissions
-  file: path={{kt_location}} owner={{owner_user}} group={{owner_group}} mode=0600 state=file
+  file: path={{kt_location}} owner={{owner_user}} group={{owner_group}} mode=0640 state=file
   tags:
   - keytab
   - config