diff --git a/modules/agenix.nix b/modules/agenix.nix
index a709f2c..8282491 100644
--- a/modules/agenix.nix
+++ b/modules/agenix.nix
@@ -56,7 +56,7 @@
         clementines-jwt = {
             file = ../secrets/clementines-jwt.age;
             owner = "root";
-            group = "root";
+            group = "admin";
             mode = "0440";
         };
     };