diff --git a/gitops_router.sh b/gitops_router.sh
index 92ad33b..8978be5 100644
--- a/gitops_router.sh
+++ b/gitops_router.sh
@@ -163,7 +163,10 @@ update)
   ssh_router) update 1 ssh_router.sh .local/bin 500 ;;
   gitops_router) update 1 gitops_router.sh .local/bin 500 ;;
   validate_command) update 1 validate_command_access.sh .local/bin 500 ;;
-  home_tar) podman cp "$PERSON":/app/workspaces/home.tar.gz "$HOME"/ ;;
+  home_tar)
+    podman cp "$PERSON":/app/workspaces/home.tar.gz "$HOME"/
+    chmod 600 "$HOME"/home.tar.gz
+    ;;
   gitconfig) update 0 gitconfig.template . 500 ;;
   *) log ERROR "update: invalid arg '${args[0]}'" ;;
   esac