diff --git a/src/utils.ts b/src/utils.ts
index 9ad47fe678..080227724c 100644
--- a/src/utils.ts
+++ b/src/utils.ts
@@ -80,7 +80,7 @@ export class CliUtils {
         }
 
         return new Promise<string>((resolve, reject) => {
-            fs.writeFile(p, data, 'utf8', err => {
+            fs.writeFile(p, data, { encoding: 'utf8', mode: 0o600 }, err => {
                 if (err != null) {
                     reject('Cannot save file to ' + p);
                 }