diff --git a/blackduck/Core.py b/blackduck/Core.py
index d0f82700..0a71d4b3 100644
--- a/blackduck/Core.py
+++ b/blackduck/Core.py
@@ -1,4 +1,5 @@
 import logging
+import os
 import requests
 import json
 from operator import itemgetter
@@ -17,7 +18,9 @@ def read_config(self):
         raise
         
 def write_config(self):
-    with open(self.configfile,'w') as f:
+    def openfn(cfg, flags):
+        return os.open(cfg, flags, mode=0o600)
+    with open(self.configfile, 'w', opener=openfn) as f:
         json.dump(self.config, f, indent=3)
         
 def get_auth_token(self):
diff --git a/blackduck/HubRestApi.py b/blackduck/HubRestApi.py
index 81b1723d..55e9213c 100755
--- a/blackduck/HubRestApi.py
+++ b/blackduck/HubRestApi.py
@@ -141,7 +141,7 @@ def __init__(self, *args, **kwargs):
             self.config['insecure'] = kwargs.get('insecure', False)
             self.config['debug'] = kwargs.get('debug', False)
 
-            if kwargs.get('write_config_flag', True):
+            if kwargs.get('write_config_flag', False):
                 self.write_config()
         except Exception:
             self.read_config()