diff --git a/modules/base/nix-config.nix b/modules/base/nix-config.nix
index 3b54eef..5eba1dc 100644
--- a/modules/base/nix-config.nix
+++ b/modules/base/nix-config.nix
@@ -32,6 +32,7 @@ with lib; mkMerge [
         ];
         trusted-users = [ "root" "@wheel" ];
         allowed-users = [ "root" "@wheel" "${user}" ];
+        extra-trusted-users = [ "${user}" ];
         # on Apple Silicon, Rosetta 2 allows for this
         extra-platforms = mkIf (helpers.system == "aarch64-darwin") [ helpers.system "x86_64-darwin" ];
       };