diff --git a/roles/pinentry-wsl/tasks/main.yaml b/roles/pinentry-wsl/tasks/main.yaml
index 7483050..53530f8 100644
--- a/roles/pinentry-wsl/tasks/main.yaml
+++ b/roles/pinentry-wsl/tasks/main.yaml
@@ -4,7 +4,7 @@
   file:
       path: "/home/{{ account.name }}/bin"
       state: directory
-      mode: "0777"
+      mode: "0744"
 
 - name: download script
   become_user: "{{ account.name }}"
@@ -25,6 +25,13 @@
       name: gpg-agent
       state: latest
 
+- name: ensure user/.gnupg exists
+  become_user: "{{ account.name }}"
+  file:
+      path: "/home/{{ account.name }}/.gnupg"
+      state: directory
+      mode: "0700"
+
 - name: enable script in gpg-agent
   become_user: "{{ account.name }}"
   lineinfile: