diff --git a/internal/namespace/test/serialization_test.go b/internal/namespace/test/serialization_test.go
index 993a7895a9..e22d147369 100644
--- a/internal/namespace/test/serialization_test.go
+++ b/internal/namespace/test/serialization_test.go
@@ -110,7 +110,7 @@ func TestSerialization(t *testing.T) {
 
 					vtSerialized, err := caveatDef.MarshalVT()
 					require.NoError(err)
-					err = os.WriteFile(fmt.Sprintf("testdata/proto/%s-caveat-%s.vtproto", test.schema, caveatDef.Name), vtSerialized, 0o644)
+					err = os.WriteFile(fmt.Sprintf("testdata/proto/%s-caveat-%s.vtproto", test.schema, caveatDef.Name), vtSerialized, 0o600)
 					require.NoError(err)
 				}
 			} else {