diff --git a/elements/local-config/install.d/62-ssh-key b/elements/local-config/install.d/62-ssh-key
index 9e34f23d2..544162ec1 100755
--- a/elements/local-config/install.d/62-ssh-key
+++ b/elements/local-config/install.d/62-ssh-key
@@ -7,4 +7,6 @@ set -e
 if [ -e "/tmp/in_target.d/ssh-authorized-keys" ]; then
   mkdir -p /root/.ssh
   cat /tmp/in_target.d/ssh-authorized-keys >> /root/.ssh/authorized_keys
+  chmod 0700 /root/.ssh
+  chmod 0600 /root/.ssh/authorized_keys
 fi