diff --git a/lektor/content/images/contents.lr b/lektor/content/images/contents.lr
index 45951cc..36de226 100644
--- a/lektor/content/images/contents.lr
+++ b/lektor/content/images/contents.lr
@@ -44,6 +44,9 @@ be accessed on **http://metadata/ssh-keys**. A Unix alike OS could use
 this information similar to the following code snippet:
 
 ```
+# Thanks to @LeahNeukirchen
+umask 077
+
 tmp=$(mktemp)
 curl http://metadata/ssh-keys > "${tmp}"