diff --git a/cyrus/manifests/init.pp b/cyrus/manifests/init.pp
index a162d73..46260c6 100644
--- a/cyrus/manifests/init.pp
+++ b/cyrus/manifests/init.pp
@@ -57,9 +57,9 @@ class cyrus {
     file { "${ssl::private}/cyrus.key":
         ensure  => present,
         source  => $cyrus_key,
-        mode    => "0600",
+        mode    => "0640",
         owner   => "root",
-        group   => "root",
+        group   => "mail",
         notify  => Service["cyrus-imapd"],
     }
 
diff --git a/postfix/manifests/init.pp b/postfix/manifests/init.pp
index cdac1ca..8dffa47 100644
--- a/postfix/manifests/init.pp
+++ b/postfix/manifests/init.pp
@@ -86,7 +86,7 @@ class postfix {
         source  => $postfix_key,
         mode    => "0640",
         owner   => "root",
-        group   => "root",
+        group   => "postfix",
         require => Package["postfix"],
         notify  => Service["postfix"],
     }