diff --git a/salt/pcap/init.sls b/salt/pcap/init.sls
index 17162fb16..9cfb2b68f 100644
--- a/salt/pcap/init.sls
+++ b/salt/pcap/init.sls
@@ -69,9 +69,9 @@ sensoroniagentconf:
   file.managed:
     - name: /opt/so/conf/steno/sensoroni.json
     - source: salt://pcap/files/sensoroni.json
-    - user: root
-    - group: root
-    - mode: 644
+    - user: stenographer
+    - group: stenographer
+    - mode: 600
     - template: jinja
 
 stenoca:
diff --git a/salt/soc/init.sls b/salt/soc/init.sls
index 7e67d1202..f977cd161 100644
--- a/salt/soc/init.sls
+++ b/salt/soc/init.sls
@@ -28,6 +28,7 @@ socsync:
     - source: salt://soc/files/soc
     - user: 939
     - group: 939
+    - mode: 600
     - template: jinja
 
 so-soc:
@@ -78,6 +79,7 @@ kratossync:
     - source: salt://soc/files/kratos
     - user: 928
     - group: 928
+    - mode: 600
     - template: jinja
 
 so-kratos: