diff --git a/internal/cli/cli.go b/internal/cli/cli.go
index 7dc65cb7..bbbea0b9 100644
--- a/internal/cli/cli.go
+++ b/internal/cli/cli.go
@@ -137,7 +137,7 @@ func (c *banzaiContext) save() {
 		log.Debug("creating config dir")
 
 		configPath := filepath.Dir(viper.ConfigFileUsed())
-		err := os.MkdirAll(configPath, os.ModePerm)
+		err := os.MkdirAll(configPath, 0700)
 		if err != nil {
 			log.Fatal(emperror.Wrap(err, "failed to create config dir"))
 		}