diff --git a/modules/system/devices/disks/impermanence/root/default.nix b/modules/system/devices/disks/impermanence/root/default.nix
index e611e07..9786f24 100644
--- a/modules/system/devices/disks/impermanence/root/default.nix
+++ b/modules/system/devices/disks/impermanence/root/default.nix
@@ -4,8 +4,8 @@
     hideMounts = true;
     directories = [
       "/etc/nixos"
-      "/etc/secureboot"
       "/var/lib/nixos"
+      { directory = "/etc/secureboot"; mode = "0700"; }
     ];
     files = [
       "/etc/machine-id"