diff --git a/hive.nix b/hive.nix
index 2bd2c37..3ca7bae 100644
--- a/hive.nix
+++ b/hive.nix
@@ -20,6 +20,7 @@ in {
       (users.root { ssh = false; })
       users.catvayor
     ];
+    nix.settings.trusted-users = [ "root" "@wheel" ];
   };
 
   kat-r86s = { name, nodes, ... }: {
diff --git a/machines/kat-probook/configuration.nix b/machines/kat-probook/configuration.nix
index 7abfabd..40233e1 100644
--- a/machines/kat-probook/configuration.nix
+++ b/machines/kat-probook/configuration.nix
@@ -56,6 +56,7 @@
   programs.zsh.enable = true;
 
   environment.systemPackages = with pkgs; [
+    (pkgs.callPackage <agenix/pkgs/agenix.nix> {})
     wget
     brightnessctl
     nix-search-cli