Is there a reason for changing the perms on this file?  Execute shouldn't be needed on a config file and I intentionally left write off since puppet is managing it.