diff --git a/salt/bootstrap.sh b/salt/bootstrap.sh
index 9db2a28..ecc211a 100755
--- a/salt/bootstrap.sh
+++ b/salt/bootstrap.sh
@@ -30,6 +30,7 @@ pillar_roots:
 log_file: file:///dev/log
 EOF
 
+umask 077
 cat >/etc/salt/grains <<EOF
 roles:
   - fileserver