diff --git a/machines/common.nix b/machines/common.nix
index 1e91785..577e9c6 100644
--- a/machines/common.nix
+++ b/machines/common.nix
@@ -140,6 +140,8 @@
       };
   };
 
+  users.mutableUsers = false;
+
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
diff --git a/users/jan/default.nix b/users/jan/default.nix
index c309b2f..3e21165 100644
--- a/users/jan/default.nix
+++ b/users/jan/default.nix
@@ -1,5 +1,6 @@
 { config, pkgs, lib, inputs, fontSize ? null, ... }:
 
+let secrets = import ./secrets.nix; in
 {
   nixpkgs.overlays = lib.mkAfter ((import ../../overlays) ++ [
     inputs.wired.overlays.default
@@ -16,6 +17,7 @@
       "docker"
     ];
     shell = pkgs.zsh;
+    inherit (secrets) initialHashedPassword;
   };
 
   home-manager = {
diff --git a/users/jan/secrets.nix b/users/jan/secrets.nix
index 41eed1d..13372c2 100644
Binary files a/users/jan/secrets.nix and b/users/jan/secrets.nix differ