diff --git a/nixos-configs/common/default.nix b/nixos-configs/common/default.nix
index 8b45a12..4037371 100644
--- a/nixos-configs/common/default.nix
+++ b/nixos-configs/common/default.nix
@@ -12,6 +12,9 @@
 
   # clean /tmp on boot.
   boot.cleanTmpDir = true;
+  # Allow any admin to build packages, not just root.
+  ## if you don't set this then your sshUser MUST BE ROOT, or you'll get untrusted sig errors.
+  nix.settings.trusted-users = [ "@wheel" ]; 
 
   # Automatically optimize the Nix store to save space
   # by hard-linking identical files together. These savings
diff --git a/nixos-configs/hosts/exgod/configuration.nix b/nixos-configs/hosts/exgod/configuration.nix
index 9e51043..802fafc 100644
--- a/nixos-configs/hosts/exgod/configuration.nix
+++ b/nixos-configs/hosts/exgod/configuration.nix
@@ -37,7 +37,7 @@
   # Enable the X11 windowing system.
   # services.xserver.enable = true;
 
-  nix.settings.require-sigs = false;
+  nix.settings.require-sigs = true;
 
   # Configure keymap in X11
   services.xserver.layout = "us";