diff --git a/common/deployments/hub-production.yaml b/common/deployments/hub-production.yaml
index d45a62a60825c43047144ade728f6fe04a787209..646e9ce8bafe9a67ff1856aa716e4c9a03109092 100644
--- a/common/deployments/hub-production.yaml
+++ b/common/deployments/hub-production.yaml
@@ -262,7 +262,7 @@ hub:
                   {"name": "WEBDAV_VENDOR", "value": "owncloud"},
                   # XXX: strict permissions needed for .local/share/jupyter/runtime/jupyter_cookie_secret
                   # quicker directory cache and polling
-                  {"name": "MOUNT_OPTS", "value": "--file-perms=0600 --dir-perms=0770 --dir-cache-time=1m0s --poll-interval=0m20s"},
+                  {"name": "MOUNT_OPTS", "value": "--file-perms=0700 --dir-perms=0770 --dir-cache-time=1m0s --poll-interval=0m20s"},
                   {"name": "MOUNT_PATH", "value": "/owncloud" + subpath},
                   # default mode is "full"
                   {"name": "VFS_CACHE_MODE", "value": "full"},