Index: scripts/lockdown.sh
===================================================================
diff -u -ra314e515f0e6d3a40237c9be387df61963992723 -ree1c74e58973274b59557d10acce063504fc2d11
--- scripts/lockdown.sh	(.../lockdown.sh)	(revision a314e515f0e6d3a40237c9be387df61963992723)
+++ scripts/lockdown.sh	(.../lockdown.sh)	(revision ee1c74e58973274b59557d10acce063504fc2d11)
@@ -34,6 +34,7 @@
 denali ALL=(root) NOPASSWD: /bin/systemctl stop wpa_supplicant@*
 denali ALL=(root) NOPASSWD: /bin/systemctl restart wpa_supplicant@*
 denali ALL=(root) NOPASSWD: /bin/rm -f /etc/wpa_supplicant/wpa_supplicant-*
+denali ALL=(root) NOPASSWD: /bin/chmod 640 /etc/wpa_supplicant/wpa_supplicant-*
 denali ALL=(root) NOPASSWD: /sbin/ip link set *
 denali ALL=(root) NOPASSWD: /sbin/ip route show
 denali ALL=(root) NOPASSWD: /sbin/ip route del default