diff --git a/hosts/juni/flake.nix b/hosts/juni/flake.nix
index 1a5e3e20..b2ef8c17 100644
--- a/hosts/juni/flake.nix
+++ b/hosts/juni/flake.nix
@@ -278,6 +278,8 @@
                     ];
                   };
 
+                  security.sudo.wheelNeedsPassword = false;
+
                   # System configuration
                   system.stateVersion = stateVersion;
                   networking.hostName = configuration_name;
diff --git a/hosts/juni/impermanence.nix b/hosts/juni/impermanence.nix
index 58ee7967..04059801 100644
--- a/hosts/juni/impermanence.nix
+++ b/hosts/juni/impermanence.nix
@@ -24,6 +24,10 @@
       "/var/lib/upower"
 
       "/var/lib/flatpak"
+
+      # bao secrets
+      "/run/openbao"
+      "/run/secrets"
     ];
     files = [
       "/machine-key.json"