diff --git a/files/tal/on_update.sh b/files/tal/on_update.sh
index 6b2493b4b6aa7538c1038afc03757f1af389ed5b..3eb85f1882b29a7281dd9519983aac81f0e1f4f5 100644
--- a/files/tal/on_update.sh
+++ b/files/tal/on_update.sh
@@ -1,5 +1,7 @@
 #!/usr/bin/bash
 
+cd source
+
 git submodule init
 git submodule update
 
diff --git a/manifests/tal_cli.pp b/manifests/tal_cli.pp
index ac916b286812e8623f71099240e8c2e6dd57bea0..27d4075f5f8c7d8b58e2b4ad6b661a97156b707f 100644
--- a/manifests/tal_cli.pp
+++ b/manifests/tal_cli.pp
@@ -21,7 +21,7 @@ class aes::tal_cli(
     ensure  => file,
     owner   => examadm,
     group   => examadm,
-    mode    => '0700',
+    mode    => '0600',
     content => $credentials,
   }
 
@@ -37,6 +37,6 @@ class aes::tal_cli(
     command => '/opt/utils/update_repo.sh /home/examadm/tal-cli/source https://oauth2:glpat-bfpVssm_zFmt1YRW7cLz@gitlab.liu.se/upp-aes/tal-cli.git master',
     user    => examadm,
     group   => examadm,
-    cwd     => '/home/examadm/tal-cli/source',
+    cwd     => '/home/examadm/tal-cli',
   }
 }