diff --git a/keystone/orchestrate/get_keystone_public_key.sls b/keystone/orchestrate/get_keystone_public_key.sls
index 2be74e1..3904702 100644
--- a/keystone/orchestrate/get_keystone_public_key.sls
+++ b/keystone/orchestrate/get_keystone_public_key.sls
@@ -7,7 +7,7 @@
 keystone_fernet_keys:
   file.directory:
   - name: {{ server.tokens.location }}
-  - mode: 650
+  - mode: 750
   - user: keystone
   - group: keystone
 
@@ -16,7 +16,7 @@
     - user: keystone
     - group: keystone
     - file_mode: 600
-    - dir_mode: 600
+    - dir_mode: 700
     - makedirs: True
     - recurse:
       - user