diff --git a/modules/programs/spotify-shortcuts.nix b/modules/programs/spotify-shortcuts.nix
index 111fc88..39214c3 100644
--- a/modules/programs/spotify-shortcuts.nix
+++ b/modules/programs/spotify-shortcuts.nix
@@ -24,7 +24,7 @@ in {
       SPOTIFY_SHORTCUTS_CONFIG = config.sops.templates."spotify-shortcuts-client.json".path;
     };
     sops.templates."spotify-shortcuts-client.json" = {
-      mode = "644";
+      mode = "444";
       content = ''
         {
           "clientId": "${config.sops.placeholder.${cfg.clientIdSopsKey}}",