diff --git a/Python/etc/crans/secrets/secrets.py b/Python/etc/crans/secrets/secrets.py
index f6ce355..fc513c3 100644
--- a/Python/etc/crans/secrets/secrets.py
+++ b/Python/etc/crans/secrets/secrets.py
@@ -1,2 +1,4 @@
-info["perms"] = 0600
+info["perms"] = 0440
+info["owner"] = "respbats"
+info["group"] = "adm"
 print file("/etc/crans/secrets/secrets.py").read()
diff --git a/Rules/rules.xml b/Rules/rules.xml
index f23d356..8209d23 100644
--- a/Rules/rules.xml
+++ b/Rules/rules.xml
@@ -26,7 +26,7 @@
 	  timing="post" when="modified" status="check"
 	  command="cat /etc/crans/apt-keys/*.asc | apt-key add -"/>
 
-  <Directory name="/etc/crans/secrets" owner="root" group="root" perms="0700"/>
+  <Directory name="/etc/crans/secrets" owner="respbats" group="adm" perms="0550"/>
 
   <Service name="bcfg2" status="on"/>
   <Service name="bcfg2-server" status="on"/>