puppet-keystone/releasenotes/notes/permissions_on_keys_and_creds-9c0b9f56dfc1fd63.yaml

---
security:
  - Make the fernet key directory, fernet keys, credential
    folder, and credentials have mode 0600. This ensures
    that only the keystone user can read the keys.