diff --git a/robot/compose/docker-compose.yml b/robot/compose/docker-compose.yml
index b257ef8..ceb5cde 100644
--- a/robot/compose/docker-compose.yml
+++ b/robot/compose/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   keycloak:
-    image: dvrbanec/keycloak-dev:latest
+    image: dvrbanec/keycloak-dev:1
     ports:
       - 8443:8443
     networks:
@@ -29,7 +29,7 @@ services:
       curl -O https://syncandshare.desy.de/index.php/s/Ncj3Lfk8iEGYGsf/download/teapot-tests.robot
       curl -O https://syncandshare.desy.de/index.php/s/Zzr8qMipiL2En5D/download/variables.py
       robot --outputdir robot/output/ /tmp/teapot-tests.robot
-      echo "Something else. "
+      echo "Something . "
       while true; do sleep 1; done'
     networks:
       - test
diff --git a/teapot.py b/teapot.py
index 978145e..cbd3547 100644
--- a/teapot.py
+++ b/teapot.py
@@ -16,7 +16,8 @@
 from os.path import exists
 from pathlib import Path
 from pwd import getpwnam
-from stat import S_IROTH, S_IRWXG, S_IRWXU, S_IXOTH
+# from stat import S_IROTH, S_IRWXG, S_IRWXU, S_IXOTH
+from stat import S_IRGRP, S_IRWXO, S_IRWXU, S_IXGRP
 
 import anyio
 import httpx
@@ -123,7 +124,7 @@ async def lifespan(app: FastAPI):
 # those are using the bit patterns provided with the "stat" module as below,
 # combining them happens via bitwise OR
 # TO DO: find a way to not have to use rwx for others!
-STANDARD_MODE = S_IRWXU | S_IRWXG | S_IROTH | S_IXOTH
+STANDARD_MODE = S_IRWXU | S_IRGRP | S_IXGRP | S_IRWXO
 # session state is kept in this global dict for each username as primary key
 # data stored within each subdict is
 # pid, port, created_at, last_accessed