diff --git a/cluster/services/locksmith/provider.nix b/cluster/services/locksmith/provider.nix
index cc8f568..9c492a1 100644
--- a/cluster/services/locksmith/provider.nix
+++ b/cluster/services/locksmith/provider.nix
@@ -57,6 +57,7 @@ in
       distributed.enable = true;
       inherit (providerConfig) wantedBy after;
       serviceConfig = {
+        Type = "oneshot";
         PrivateTmp = true;
         LoadCredential = lib.mkForce [];
       };