diff --git a/secrets b/secrets
index 8e440bd..dace9b5 100755
--- a/secrets
+++ b/secrets
@@ -99,6 +99,8 @@ rm -rf "$basedir"/*
 
 while read name; do
     fullpath="$basedir/$name"
+    touch "$fullpath"
+    chmod 600 "$fullpath"
     read size
     head --bytes="$size" - > "$fullpath"
     read owner