diff --git a/config/instance.nix b/config/instance.nix
index 6e04e09..fbf05d7 100644
--- a/config/instance.nix
+++ b/config/instance.nix
@@ -41,7 +41,7 @@ with lib;
 
     local-users =
       if (host.hardened) then
-        local-admins
+        getAttrs local-admins all-users
       else all-users;
 
   in {