--- a/debian/littlebird-tc-core.postinst	Fri Sep 02 10:07:48 2011 +0200
+++ b/debian/littlebird-tc-core.postinst	Fri Sep 02 11:10:36 2011 +0200
@@ -94,6 +94,11 @@
 	    db_go || true
 	fi
     fi
+    # permissions for the cert
+    test "$key" && {
+	chown root: "$key"
+	chmod -v go= "$key"
+    }
 
     # tweak the config file, but just the lines following a magical
     # debconf line