diff --git a/.install.conf.yaml b/.install.conf.yaml
index a6ae05f..4c7ff40 100644
--- a/.install.conf.yaml
+++ b/.install.conf.yaml
@@ -21,7 +21,8 @@
     ~/.config/systemd/mpDris2.service: mpd/mpDris2.service
     ~/.profile: profile.sh
     ~/.ssh/config: ssh/config
-    ~/.ssh/config.d/zz_git_wildcard.config: ssh/config.d/zz_git_wildcard.config
+    ~/.ssh/config.d/00_README: ssh/config.d/00_README
+    ~/.ssh/config.d/99-git_wilcard.config: ssh/config.d/99-git_wilcard.config
     ~/.tmux.conf: tmux/tmux.conf
     ~/.vimrc: vim/vimrc
     ~/.xinitrc: X11/xinitrc
@@ -32,5 +33,9 @@
     ~/.config/awesome: awesome
     ~/.config/redshift.conf: redshift/redshift.conf
 
+- create:
+    ~/.ssh/keys/:
+        mode: 0700
+
 #- shell:
 #  - git submodules update # after linking ~/.gitconfig
diff --git a/ssh/config.d/00_README b/ssh/config.d/00_README
new file mode 100644
index 0000000..218d8eb
--- /dev/null
+++ b/ssh/config.d/00_README
@@ -0,0 +1,13 @@
+# Separate SSH configurations
+#
+# This directory contains various separate ssh configurations.
+
+# Ordering of various lemmas is important. Therefore, one can use
+# a numeric prefix for ordering.
+#
+# At the time of writing, the current scheme has two priorities:
+# * `20-` domain specific configurations
+# * `30-` host   specific configurations
+#
+# Other prefixes can be added at will as long as the numeric ordering
+# is maintained.