diff --git a/roles/init/tasks/main.yml b/roles/init/tasks/main.yml
index 7b9c561..1af72a3 100755
--- a/roles/init/tasks/main.yml
+++ b/roles/init/tasks/main.yml
@@ -150,11 +150,12 @@
 
           template {
             destination = "/home/jd/.ssh/id_ed25519-cert.pub"
+            perms = "0644"
 
             contents = <<EOH
-          {{ with secret "ssh/sign/admin" (printf "public_key=%s" (trimSpace (file "/home/jd/.ssh/id_ed25519.pub"))) "valid_principals=jd" }}
-          {{ .Data.signed_key }}
-          {{ end }}
+          {{ '{{' }} with secret "ssh/sign/admin" (printf "public_key=%s" (trimSpace (file "/home/jd/.ssh/id_ed25519.pub"))) "valid_principals=jd" {{ '}}' }}
+          {{ '{{' }} .Data.signed_key {{ '}}' }}
+          {{ '{{' }} end {{ '}}' }}
           EOH
           }
         owner: root