diff --git a/flakes/secrets-bao/nixos-module.nix b/flakes/secrets-bao/nixos-module.nix
index 48cc681d..1538c859 100644
--- a/flakes/secrets-bao/nixos-module.nix
+++ b/flakes/secrets-bao/nixos-module.nix
@@ -502,8 +502,9 @@ in
 
              pathConfig = {
                PathChanged = secret.path;
-               PathExists = secret.path;
                Unit = "openbao-secret-changed-${name}.service";
+               TriggerLimitIntervalSec = 30;
+               TriggerLimitBurst = 3;
              };
            }
          ) cfg.secrets;