diff --git a/hosts/alice/default.nix b/hosts/alice/default.nix
index 46482ba..a6e5c54 100644
--- a/hosts/alice/default.nix
+++ b/hosts/alice/default.nix
@@ -27,7 +27,11 @@
   # TODO: find out why this is required
   age.identityPaths = ["/home/buffet/.ssh/id_agenix"];
   networking.hostName = "alice";
-  users.users.root.hashedPassword = "*";
+
+  users = {
+    mutableUsers = false;
+    users.root.hashedPassword = "!";
+  };
 
   environment.systemPackages = with pkgs; [
     gitFull