diff --git a/.ansible-lint b/.ansible-lint
new file mode 100644
index 0000000..4fd0a04
--- /dev/null
+++ b/.ansible-lint
@@ -0,0 +1,2 @@
+skip_list:
+    - '106'  # Role name {} does not match ``^[a-z][a-z0-9_]+$`` pattern
diff --git a/tasks/client.yaml b/tasks/client.yaml
index 56f4466..9fb12e8 100644
--- a/tasks/client.yaml
+++ b/tasks/client.yaml
@@ -92,6 +92,7 @@
       content: |
           CKNFAST_OVERRIDE_SECURITY_ASSURANCES=explicitness
       force: no
+      mode: 0644
 
 - name: create snmp.conf
   copy:
@@ -99,6 +100,7 @@
       content: |
           defaultPort 21161
       force: yes
+      mode: 0644
 
 - name: enroll client to HSM
   command: /opt/nfast/bin/nethsmenroll --force {{ thales_hsm_ip_address }} {{ anonkneti.stdout_lines[0] }}