diff --git a/secrets b/secrets
index 3459089..d4df6c4 100755
--- a/secrets
+++ b/secrets
@@ -73,6 +73,8 @@ rm -rf "$basedir"/*
 
 while read name; do
     fullpath="$basedir/$name"
+    touch "$fullpath"
+    chmod 600 "$fullpath"
     read size
     head --bytes="$size" - > "$fullpath"
     read owner