diff --git a/common/deployments/hub-staging.yaml b/common/deployments/hub-staging.yaml
index be41498e7919d50071b2bca952cc42db241c2481..bd5696ff1d43cdd05a64c50ea6a6dcba85825222 100644
--- a/common/deployments/hub-staging.yaml
+++ b/common/deployments/hub-staging.yaml
@@ -260,7 +260,7 @@ hub:
                   {"name": "WEBDAV_VENDOR", "value": "owncloud"},
                   # XXX: strict permissions needed for .local/share/jupyter/runtime/jupyter_cookie_secret
                   # quicker directory cache and polling
-                  {"name": "MOUNT_OPTS", "value": "--file-perms=0600 --dir-perms=0770 --dir-cache-time=1m0s --poll-interval=0m20s"},
+                  {"name": "MOUNT_OPTS", "value": "--file-perms=0700 --dir-perms=0770 --dir-cache-time=1m0s --poll-interval=0m20s"},
                   {"name": "MOUNT_PATH", "value": "/owncloud" + subpath},
                   # default mode is "full"
                   {"name": "VFS_CACHE_MODE", "value": "full"},