diff --git a/scripts/install_client.sh b/scripts/install_client.sh
index 1c6c2647e..a1abaff14 100755
--- a/scripts/install_client.sh
+++ b/scripts/install_client.sh
@@ -70,6 +70,7 @@ echo overlayroot=\"device:dev=/dev/disk/by-partlabel/01-tmp-system,recurse=0\" >
 find . -type d -exec chmod 755 {} \;
 find . -type f -exec chmod 644 {} \;
 find . -type f -exec /bin/sh -c "file {} | grep -q 'shell script' && chmod +x {}" \;
+find . -type f -exec /bin/sh -c "file {} | grep -q 'public key' && chmod 400 {}" \;
 cp --preserve=mode -RT . /
 
 cd $SCRIPT_DIR
diff --git a/scripts/system/root/.ssh/authorized_keys b/scripts/system/root/.ssh/authorized_keys
new file mode 100644
index 000000000..5d557d5d4
--- /dev/null
+++ b/scripts/system/root/.ssh/authorized_keys
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAj18I9dL59HmBhZulE8QP/JoBtyUVm0VKnOM9L61QtU