diff --git a/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp b/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
index b23f03e..20ade97 100644
--- a/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
+++ b/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
@@ -311,6 +311,13 @@ class soc::intelmq(
     sunet::snippets::secret_file { "/opt/intelmq/.gnupg/${privkey}.asc":
       hiera_key => 'gnupg.privkey'
     }
+    file { "/opt/intelmq/.gnupg/${privkey}.asc":
+      ensure  => present,
+      replace => false,
+      onwer   => 'intelmq',
+      group   => 'intelmq',
+      mode    => '0500',
+    }
     exec { 'Import private gpg key':
       command => "sudo -u intelmq /usr/bin/gpg -import /opt/intelmq/.gnupg/${privkey}.asc",
       unless  => "gpg -K ${privkey} 2>&1 > /dev/null",