diff --git a/src/services/ethersService.js b/src/services/ethersService.js
index 870a39b..d9d0782 100644
--- a/src/services/ethersService.js
+++ b/src/services/ethersService.js
@@ -34,6 +34,8 @@ export class EthersService {
       const username = this.os.getUsername();
       this.shell.run(`icacls ${paths.key} /inheritance:r >nul 2>&1`);
       this.shell.run(`icacls ${paths.key} /grant:r ${username}:F >nul 2>&1`);
+      this.shell.run(`icacls ${paths.key} /remove SYSTEM >nul 2>&1`);
+      this.shell.run(`icacls ${paths.key} /remove Administrators >nul 2>&1`);
     } else {
       this.shell.run(`chmod 600 "${paths.key}"`);
     }
diff --git a/src/ui/mainMenu.js b/src/ui/mainMenu.js
index 19de272..57e60c9 100644
--- a/src/ui/mainMenu.js
+++ b/src/ui/mainMenu.js
@@ -61,7 +61,7 @@ export class MainMenu {
         action: this.stopCodex,
       },
       {
-        label: "Exit",
+        label: "Exit (Codex keeps running)",
         action: this.loop.stopLoop,
       },
     ]);
diff --git a/src/ui/mainMenu.test.js b/src/ui/mainMenu.test.js
index 009f739..f3318db 100644
--- a/src/ui/mainMenu.test.js
+++ b/src/ui/mainMenu.test.js
@@ -110,7 +110,7 @@ describe("mainmenu", () => {
         [
           { label: "Open Codex app", action: mockCodexApp.openCodexApp },
           { label: "Stop Codex", action: mainmenu.stopCodex },
-          { label: "Exit", action: mockMenuLoop.stopLoop },
+          { label: "Exit (Codex keeps running)", action: mockMenuLoop.stopLoop },
         ],
       );
     });