diff --git a/cluster/services/hercules-ci-multi-agent/default.nix b/cluster/services/hercules-ci-multi-agent/default.nix
index def9c2a..af27647 100644
--- a/cluster/services/hercules-ci-multi-agent/default.nix
+++ b/cluster/services/hercules-ci-multi-agent/default.nix
@@ -22,4 +22,15 @@
       ];
     };
   };
+  garage = let
+    hciAgentKeys = lib.pipe config.services.hercules-ci-multi-agent.nodes [
+      (lib.collect lib.isList)
+      lib.flatten
+      lib.unique
+      (map (x: "hci-agent-${x}"))
+    ];
+  in {
+    keys = lib.genAttrs hciAgentKeys (lib.const {});
+    buckets.nix-store.allow = lib.genAttrs hciAgentKeys (lib.const [ "read" "write" ]);
+  };
 }
diff --git a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age
index e7867ab..cfb9ee3 100644
Binary files a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age and b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age differ
diff --git a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-VEGAS.age b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-VEGAS.age
index 2a98c9f..93550c4 100644
Binary files a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-VEGAS.age and b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-VEGAS.age differ
diff --git a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age
index d91c8f4..f8ef7d8 100644
--- a/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age
+++ b/cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age
@@ -1,12 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 NO562A XV9fjixDzjYkcTAh/uAWS+vbvqe19HhF1D3ak1g1jiE
-t5PEwAn+I4bJN27fYEZVZQh/SVxQocBMxqxc1O5CCgE
--> ssh-ed25519 5/zT0w 0KuTIG51h+oX3QWZukAjoBVHXE6NxKBcSfDN9u/A2H8
-SGm8Eh5L5ELB3gjmV5pfh3HqDnGrdif0I7mF7ulabW4
--> ssh-ed25519 YIaSKQ bjHZIN85glRN0hdH76iu7kg243enfH6VlX8Yr54FfzM
-0RzxbV9ABYElM2DIfimkvzeVuhobpsiDTH39PgVDTvE
--> 8&39JRT-grease {)Hfc"$ |,#c1\: Vf>^[!hm ;2o>+a"M
-y9JRDuvO1YC61IhxUofWLAYfOEldTR9/SwnGuo7lAbAp8smTrlWO2qVe3Ztp+gQU
-NXZ9K3PaKKm1VWg
---- p75QmGUUBK5sNhkG6zDmEGa5injwKH119i6bHod55+Y
-�z��M�(_b*�j6\݋1Cg�?
�ЂAv�A�t��x_�
H������� 5�'�f�
*�Mb����F��t�,)6����Qf)�����HgBQ~-7��R��ڑ?���RU���P��(�U�W>'��F���B���OV�����
\ No newline at end of file
+-> ssh-ed25519 NO562A jNUNRaIQC1DUBiacnWc3xjMUAxnAgiyJhRA74cof3Ec
+oZZq1AQ3F0nvrk7KpinLWgT3cIoCYZ5R1s0us69OI8E
+-> ssh-ed25519 5/zT0w FmoxaTg75/xaDmSOHL5Xs6QOr5rLG/sr5TmPMfkOqxw
+XXQrFxxt5GOzXgJoPY8U71NSYi/IWmL3QrenvOuQ43Q
+-> ssh-ed25519 YIaSKQ ++dqG+dr8ie+4sPW7L+eVkXvOVvM+/oBR722S2sQsSg
+879pmnhOtZ/MiMUwDlyujykQXNmCepI2FSU2QcvvkrA
+--- QcvlVdv2fYMKmT/aCpTjdmGJ+9KnUvZCZNtl7WhgCbw
+�!j�w�~�f%�J>�H	��2�9��.Vh�ŷ���O!$ičݞԐ4\_̆J����T>�J���8Y�\�I�k���k�t�G(�AO�#�š�#�(�L������0�h=[�R�w�Uj�iV�2��(��BGgԄ^L7f�ʫ"zV��n��)����9��<I�����w1�
\ No newline at end of file