diff --git a/root/var/service/dovecot/control/1 b/root/var/service/dovecot/control/1
index 9090793..ce60cad 100644
--- a/root/var/service/dovecot/control/1
+++ b/root/var/service/dovecot/control/1
@@ -33,8 +33,8 @@ my $pem = "./ssl/imapd.pem";
 # Now copy system pem file into jail used by ldap
 copy("/home/e-smith/ssl.pem/$s.$d.pem", "$pem.$$")
   or die "failed to copy SSL PEM: $!";
-chmod 0400, "$pem.$$";
-esmith::util::chownFile("root", "root", "$pem.$$");
+chmod 0440, "$pem.$$";
+esmith::util::chownFile("root", "stunnel", "$pem.$$");
 rename("$pem.$$", "$pem")
   or die "failed to rename $pem.$$ to $pem: $!";