diff --git a/ct/pulse.sh b/ct/pulse.sh
index cc3c75464e..8a5d79694f 100644
--- a/ct/pulse.sh
+++ b/ct/pulse.sh
@@ -40,7 +40,10 @@ function update_script() {
 
     fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "*-linux-amd64.tar.gz"
     ln -sf /opt/pulse/bin/pulse /usr/local/bin/pulse
-    chown -R pulse:pulse /etc/pulse /opt/pulse
+    mkdir -p /etc/pulse
+    chown pulse:pulse /etc/pulse
+    chown -R pulse:pulse /opt/pulse
+    chmod 700 /etc/pulse
     if [[ -f "$SERVICE_PATH"/pulse-backend.service ]]; then
       mv "$SERVICE_PATH"/pulse-backend.service "$SERVICE_PATH"/pulse.service
     fi