diff --git a/hosts/containers/oparl/default.nix b/hosts/containers/oparl/default.nix
index 8aac18b2..98d66996 100644
--- a/hosts/containers/oparl/default.nix
+++ b/hosts/containers/oparl/default.nix
@@ -59,7 +59,8 @@ in
   };
   users.groups.oparl = {};
   systemd.tmpfiles.rules = [
-    "${config.users.users.oparl.home}/.ssh/id_ed25519 0400 oparl oparl - ${config.sops.secrets."users/oparl/id_ed25519".path}"
+    "C ${config.users.users.oparl.home}/.ssh/id_ed25519 0400 oparl oparl - ${config.sops.secrets."users/oparl/id_ed25519".path}"
+    "z ${config.users.users.oparl.home}/.ssh/id_ed25519 0400 oparl oparl - -"
   ];
   sops.secrets."users/oparl/id_ed25519" = {};