diff --git a/roles/ceph-docker-common/tasks/fetch_configs.yml b/roles/ceph-docker-common/tasks/fetch_configs.yml
index 805a81799..03fa62ed0 100644
--- a/roles/ceph-docker-common/tasks/fetch_configs.yml
+++ b/roles/ceph-docker-common/tasks/fetch_configs.yml
@@ -47,7 +47,7 @@
     dest: "{{ item.0 }}"
     owner: root
     group: root
-    mode: 0644
+    mode: 0600
   changed_when: false
   with_together:
     - "{{ ceph_config_keys }}"