diff --git a/home/.chezmoiscripts/universal/run_once_before_1-decrypt-age-key.tmpl b/home/.chezmoiscripts/universal/run_before_1-decrypt-age-key.tmpl
similarity index 86%
rename from home/.chezmoiscripts/universal/run_once_before_1-decrypt-age-key.tmpl
rename to home/.chezmoiscripts/universal/run_before_1-decrypt-age-key.tmpl
index e24765f9..933aca4c 100644
--- a/home/.chezmoiscripts/universal/run_once_before_1-decrypt-age-key.tmpl
+++ b/home/.chezmoiscripts/universal/run_before_1-decrypt-age-key.tmpl
@@ -14,4 +14,7 @@ if [ ! -f "${XDG_CONFIG_HOME}/age/chezmoi.txt" ]; then
   else
     chmod 600 "${XDG_CONFIG_HOME}/age/chezmoi.txt"
   fi
+else
+  logg info 'Ensuring the chezmoi.txt file has proper private permissions applied'
+  chmod 600 "${XDG_CONFIG_HOME}/age/chezmoi.txt"
 fi