diff --git a/manifests/config.pp b/manifests/config.pp
index e9ce50e..d255d15 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -229,7 +229,8 @@
     }),
     owner        => $user,
     group        => $group,
-    mode         => '0644',
+    mode         => '0640',
+    show_diff    => false,
     validate_cmd => "${venv_dir}/bin/python -m py_compile %",
     notify       => Exec['collect static files'],
   }