diff --git a/services/comms/synapse-signingkey-ensure-job.yaml b/services/comms/synapse-signingkey-ensure-job.yaml
index b1aed4d..81d95a7 100644
--- a/services/comms/synapse-signingkey-ensure-job.yaml
+++ b/services/comms/synapse-signingkey-ensure-job.yaml
@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: othrys-synapse-signingkey-ensure-3
+  name: othrys-synapse-signingkey-ensure-4
   namespace: comms
 spec:
   backoffLimit: 2
@@ -26,6 +26,7 @@ spec:
               else
                 generate_signing_key -o /work/signing.key
               fi
+              chmod 0644 /work/signing.key
           volumeMounts:
             - name: work
               mountPath: /work