diff --git a/lib/persistence.php b/lib/persistence.php
index 3b1f9af8..36b964b8 100644
--- a/lib/persistence.php
+++ b/lib/persistence.php
@@ -119,6 +119,7 @@ abstract class persistence
         if ($writtenBytes === false || $writtenBytes < strlen($data)) {
             throw new Exception('unable to write to file ' . $file, 13);
         }
+        @chmod($file, 0640); // protect file access
         return $file;
     }
 }