Index: scripts/lockdown.sh
===================================================================
diff -u -r8d76f7e1a4da17d03d1a28e78716ab19a9615cfd -r8153639f3cd191aaf8b384e3b8aadde2d51da4ea
--- scripts/lockdown.sh	(.../lockdown.sh)	(revision 8d76f7e1a4da17d03d1a28e78716ab19a9615cfd)
+++ scripts/lockdown.sh	(.../lockdown.sh)	(revision 8153639f3cd191aaf8b384e3b8aadde2d51da4ea)
@@ -34,6 +34,7 @@
 denali ALL=(root) NOPASSWD: /bin/systemctl stop wpa_supplicant@*
 denali ALL=(root) NOPASSWD: /bin/systemctl restart wpa_supplicant@*
 denali ALL=(root) NOPASSWD: /bin/rm -f /etc/wpa_supplicant/wpa_supplicant-*
+denali ALL=(root) NOPASSWD: /bin/chmod 640 /etc/wpa_supplicant/wpa_supplicant-*
 denali ALL=(root) NOPASSWD: /sbin/ip link set *
 denali ALL=(root) NOPASSWD: /sbin/ip route show
 denali ALL=(root) NOPASSWD: /sbin/ip route del default