Explicitly set permissions to initrd inject file

playbooks/include/deploy-kvm-guest.yml

@@ -74,6 +74,9 @@
           echo '{{ root_pubkey }}' > /root/.ssh/authorized_keys
           %end
         dest: "{{ tmpdir.path }}/include.ks"
+        mode: 0600
+        owner: root
+        group: "{{ ansible_wheel }}"
       delegate_to: "{{ vmhost }}"
       when:
         - inventory_hostname not in result.list_vms