diff --git a/reboot-all-chromes.sh b/reboot-all-chromes.sh
index 30bca2f..c77d9c4 100755
--- a/reboot-all-chromes.sh
+++ b/reboot-all-chromes.sh
@@ -7,8 +7,8 @@ function rebootMachine() {
 		machine="0${machine}"
 	fi
 	machine="chrome${machine}.duensing.digital"
-	echo "Attempting reboot of ${machne}..."
-	sshpass -p password ssh -o "StrictHostKeyChecking=no" user@${machine} "reboot"
+	echo "Attempting reboot of ${machine}..."
+	sshpass -p password ssh -o "StrictHostKeyChecking=no" user@${machine} "sudo reboot"
 }
 
 
diff --git a/unsafe-update-payload.sh b/unsafe-update-payload.sh
index fc0e9c3..8532ab3 100644
--- a/unsafe-update-payload.sh
+++ b/unsafe-update-payload.sh
@@ -38,5 +38,7 @@ function unsafeUpdateRoot() {
 	# Allow 'user' to reboot machine.
 	if [[ ! -f /etc/sudoers.d/userreboot ]]; then
 		echo 'user ALL = NOPASSWD: /usr/sbin/halt, /usr/sbin/reboot, /usr/sbin/poweroff' > /etc/sudoers.d/userreboot
+		chown root:root /etc/sudoers.d/userreboot
+		chmod a-w /etc/sudoers.d/userreboot
 	fi
 }