diff --git a/roles/vault/tasks/conf.yml b/roles/vault/tasks/conf.yml
index e7e526a..3cbd61a 100644
--- a/roles/vault/tasks/conf.yml
+++ b/roles/vault/tasks/conf.yml
@@ -27,7 +27,7 @@
   block:
 
     - name: Deploy the consul-template conf
-      template: src=consul-template.hcl.j2 dest={{ vault_root_dir }}/consul-template/consul-template.hcl
+      template: src=consul-template.hcl.j2 dest={{ vault_root_dir }}/consul-template/consul-template.hcl mode=600 owner=root group=root
       notify: restart consul-template-vault
 
     - name: Deploy Nomad certificate bundle template for consul-template