diff --git a/machines/massicot/kanidm-provision.nix b/machines/massicot/kanidm-provision.nix
index b7702de..83a6125 100644
--- a/machines/massicot/kanidm-provision.nix
+++ b/machines/massicot/kanidm-provision.nix
@@ -1,10 +1,5 @@
 { config, lib, ... }:
 {
-  sops.secrets = {
-    "kanidm/ocis_android_secret" = {
-      owner = "kanidm";
-    };
-  };
   systemd.services.kanidm.serviceConfig = {
     BindReadOnlyPaths = [
       config.sops.secrets."kanidm/ocis_android_secret".path