diff --git a/package.json b/package.json
index 90e9826d..8f7d8324 100644
--- a/package.json
+++ b/package.json
@@ -153,7 +153,7 @@
     "try-catch": "^2.0.0",
     "tryrequire": "^2.0.1",
     "wraptile": "^2.0.0",
-    "writejson": "^1.1.0"
+    "writejson": "^2.0.0"
   },
   "devDependencies": {
     "@babel/core": "^7.0.0-beta.49",
diff --git a/server/config.js b/server/config.js
index 889a239e..3cfd895f 100644
--- a/server/config.js
+++ b/server/config.js
@@ -86,7 +86,7 @@ function manage(key, value) {
 }
 
 function _save(callback) {
-    writejson(ConfigHome, config, callback);
+    writejson(ConfigHome, config, {mode: 0o600}, callback);
 }
 
 function listen(sock, auth) {