diff --git a/modules/desktop/default.nix b/modules/desktop/default.nix
index bf3079e..780569c 100644
--- a/modules/desktop/default.nix
+++ b/modules/desktop/default.nix
@@ -43,9 +43,10 @@ in {
   security = {
     sudo.enable = false;
     doas.enable = true;
-    doas.extraRules = [{
+    doas.extraRules = lib.mkForce [ rec {
       groups = [ "wheel" ];
-      noPass = true;
+      noPass = !config.services.fprintd.enable;
+      persist = !noPass;
     }];
   };