diff --git a/src/kubeconfigs/azCommands.ts b/src/kubeconfigs/azCommands.ts
index 3e2cf92..6bbeed6 100644
--- a/src/kubeconfigs/azCommands.ts
+++ b/src/kubeconfigs/azCommands.ts
@@ -36,6 +36,7 @@ export async function runAzKubeconfigCommandBlocking(
    proc.unref()
 
    await sleep(AZ_TIMEOUT_SECONDS)
+   fs.chmodSync(kubeconfigPath, 0o600)
    return fs.readFileSync(kubeconfigPath).toString()
 }