diff --git a/letsencrypt-compatibility-test/letsencrypt_compatibility_test/util.py b/letsencrypt-compatibility-test/letsencrypt_compatibility_test/util.py
index dd4fd3b48..43070cf03 100644
--- a/letsencrypt-compatibility-test/letsencrypt_compatibility_test/util.py
+++ b/letsencrypt-compatibility-test/letsencrypt_compatibility_test/util.py
@@ -25,7 +25,6 @@ IP_REGEX = re.compile(r"^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$")
 def create_le_config(parent_dir):
     """Sets up LE dirs in parent_dir and returns the config dict"""
     config = copy.deepcopy(constants.CLI_DEFAULTS)
-    config["strict_permissions"] = False
 
     le_dir = os.path.join(parent_dir, "letsencrypt")
     config["config_dir"] = os.path.join(le_dir, "config")
diff --git a/letsencrypt/constants.py b/letsencrypt/constants.py
index 762409d25..362009ec6 100644
--- a/letsencrypt/constants.py
+++ b/letsencrypt/constants.py
@@ -27,6 +27,7 @@ CLI_DEFAULTS = dict(
 
     auth_cert_path="./cert.pem",
     auth_chain_path="./chain.pem",
+    strict_permissions=False,
 )
 """Defaults for CLI flags and `.IConfig` attributes."""