diff --git a/manifests/config.pp b/manifests/config.pp
index 530079e..d2d0a14 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -61,7 +61,7 @@
     ensure => directory,
     owner  => $dns::params::user,
     group  => $dns::params::group,
-    mode   => '0640',
+    mode   => '0750',
   }
 
   exec { 'create-rndc.key':