diff --git a/create-luks-tpm.sh b/create-luks-tpm.sh
index 439f670..f34e765 100755
--- a/create-luks-tpm.sh
+++ b/create-luks-tpm.sh
@@ -5,6 +5,7 @@ CRYPTFS=/dev/nvme0n1p3
 
 echo "creating secret key"
 tpm2_getrandom 32 -o /root/secret.bin
+chmod 600 /root/secret.bin
 cryptsetup luksAddKey $CRYPTFS /root/secret.bin
 
 /usr/sbin/update-luks-tpm.sh
diff --git a/tags b/tags
index 7761583..cfc9c2d 100644
--- a/tags
+++ b/tags
@@ -6,4 +6,7 @@
 !_TAG_PROGRAM_NAME	Universal Ctags	/Derived from Exuberant Ctags/
 !_TAG_PROGRAM_URL	https://ctags.io/	/official site/
 !_TAG_PROGRAM_VERSION	0.0.0	/a3c87ab5/
+Details / manual installation	README.md	/^## Details \/ manual installation$/;"	s
+Result	README.md	/^## Result$/;"	s
+Usage	README.md	/^## Usage$/;"	s
 trustedboot	README.md	/^# trustedboot$/;"	c