diff --git a/Dockerfile b/Dockerfile
index b90e027..0a6258a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,11 @@
 # Smallest base image
-FROM alpine:3.6
+FROM alpine:3.7
 
 MAINTAINER Pieter Lange <pieter@ptlc.nl>
 
 RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/community/" >> /etc/apk/repositories && \
     echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing/" >> /etc/apk/repositories && \
-    apk add --update openvpn=2.4.3-r0 \
+    apk add --update openvpn=2.4.4-r1 \
       bash easy-rsa libintl inotify-tools openvpn-auth-pam google-authenticator pamtester && \
     apk add --virtual temppkg gettext &&  \
     cp /usr/bin/envsubst /usr/local/bin/envsubst && \
diff --git a/kube/deployment.yaml b/kube/deployment.yaml
index 8ff1f6a..e1bc867 100644
--- a/kube/deployment.yaml
+++ b/kube/deployment.yaml
@@ -59,6 +59,7 @@ spec:
       - name: openvpn-pki
         secret:
           secretName: openvpn-pki
+          defaultMode: 0400
       - name: openvpn-ccd
         configMap:
           name: openvpn-ccd