diff --git a/Dockerfile b/Dockerfile
index c26d27c..e85f44b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,5 +23,6 @@ COPY registry /srv/registry/
 
 ENV PYTHONUNBUFFERED=1
 ENV CONFIG_DIR=/srv
+ENV NO_CHOWN=1
 #ENTRYPOINT ["/opt/registry/run_local.sh"]
 #CMD ["--host=0.0.0.0"]
diff --git a/Dockerfile.testing b/Dockerfile.testing
index bf20ec9..427d121 100644
--- a/Dockerfile.testing
+++ b/Dockerfile.testing
@@ -37,5 +37,6 @@ COPY logrotate-http.conf /etc/logrotate.d/httpd
 COPY examples/apache.conf /etc/httpd/conf.d/
 
 ENV CONFIG_DIR=/srv
+ENV NO_CHOWN=1
 #ENTRYPOINT ["/opt/registry/run_local.sh"]
 #CMD ["--host=0.0.0.0"]
diff --git a/register.py b/register.py
index cfd3067..50ac70c 100755
--- a/register.py
+++ b/register.py
@@ -182,9 +182,10 @@ def request_token(pool, resource, scopes=None, local_dir=None):
 
     print("Token was written to {}".format(msg_path))
     if is_admin():
-        logger.debug("Correcting token file permissions...")
-        shutil.chown(token_path, user=TOKEN_OWNER_USER, group=TOKEN_OWNER_GROUP)
-        logger.debug("Corrected token file permissions...")
+        if not os.environ.get("NO_CHOWN"):
+            logger.debug("Correcting token file permissions...")
+            shutil.chown(token_path, user=TOKEN_OWNER_USER, group=TOKEN_OWNER_GROUP)
+            logger.debug("Corrected token file permissions...")
     else:
         print(NONROOT_TOKEN_MSG.format(path=msg_path, name=token_name))