diff --git a/tasks/main.yml b/tasks/main.yml
index 73bef9f..907f032 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -10,5 +10,6 @@
     path: "/etc/sudoers.d/{{ user.name }}"
     create: yes
     line: "{{ user.name }} ALL=(ALL) NOPASSWD: ALL"
+    mode: 0440
   when: user.sudoers