diff --git a/Python/etc/crans/secrets/secrets.py b/Python/etc/crans/secrets/secrets.py
index 84f26ca..23508c8 100644
--- a/Python/etc/crans/secrets/secrets.py
+++ b/Python/etc/crans/secrets/secrets.py
@@ -1,6 +1,9 @@
 info["perms"] = 0440
 if has("users") or has("2B"):
     info["owner"] = "respbats"
+elif has("rouge"):
+    # XXX: kludge pour facture.py (paypal)
+    info["owner"] = "intranet"
 else:
     info["owner"] = "root"
 info["group"] = "adm"
diff --git a/Rules/rules.xml b/Rules/rules.xml
index fd4fc26..8c8d9fe 100644
--- a/Rules/rules.xml
+++ b/Rules/rules.xml
@@ -29,8 +29,16 @@
   <Group name="users">
     <Directory name="/etc/crans/secrets" owner="respbats" group="adm" perms="0550"/>
   </Group>
+
+  <!-- XXX: kludge pour facture.py -->
+  <Group name="rouge">
+    <Directory name="/etc/crans/secrets" owner="intranet" group="adm" perms="0550"/>
+  </Group>
+
   <Group name="users" negate="true">
-    <Directory name="/etc/crans/secrets" owner="root" group="adm" perms="0550"/>
+    <Group name="rouge" negate="true">
+      <Directory name="/etc/crans/secrets" owner="root" group="adm" perms="0550"/>
+    </Group>
   </Group>
 
   <Service type="deb" name="bcfg2-server" status="on"/>