diff --git a/setup.sh b/setup.sh
index 970fd30..6e264b1 100644
--- a/setup.sh
+++ b/setup.sh
@@ -147,7 +147,7 @@ function no_zpool_exists () {
 function set_zpool_password () {
     # May or may not have a newline at the end, ZFS doesn't care
     printf -- '%s' 'password' > '/etc/zfs/'"${zpool_name}"'.key'
-    chmod '600' '/etc/zfs/'"${zpool_name}"'.key'
+    chmod '000' '/etc/zfs/'"${zpool_name}"'.key'
 }
 
 function import_pool () {