diff --git a/src/system.nix b/src/system.nix
index 9161c00..2506f0a 100644
--- a/src/system.nix
+++ b/src/system.nix
@@ -341,7 +341,8 @@
   services.kbfs.enable = true;
   services.kbfs.enableRedirector = true;
   security.wrappers.keybase-redirector.owner = "root";
-  security.wrappers.keybase-redirector.group = "users";
+  security.wrappers.keybase-redirector.group = "root";
+  security.wrappers.keybase-redirector.setuid = true;
   services.gnome.gnome-keyring.enable = true;
   services.i2p.enable = true;
   services.tlp.enable = true;