diff --git a/backend/windmill-worker/nsjail/run.powershell.config.proto b/backend/windmill-worker/nsjail/run.powershell.config.proto
index a0d77ca75e..27a36548b4 100644
--- a/backend/windmill-worker/nsjail/run.powershell.config.proto
+++ b/backend/windmill-worker/nsjail/run.powershell.config.proto
@@ -121,7 +121,7 @@ mount {
     src: "{CACHE_DIR}"
     dst: "/tmp/windmill/cache/powershell"
     is_bind: true
-    rw: true
+    rw: false
     mandatory: false
 }