diff --git a/modules/shared/remote-builder.nix b/modules/shared/remote-builder.nix
index a25f12e..fc57592 100644
--- a/modules/shared/remote-builder.nix
+++ b/modules/shared/remote-builder.nix
@@ -6,7 +6,7 @@ in
 {
   users.users.nix.openssh.authorizedKeys.keys = [
     # use nix-store for hydra which doesn't support ssh-ng
-    ''command="${config.nix.package}/bin/nix-store --serve --write",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ${key}''
+    ''restrict,command="${config.nix.package}/bin/nix-store --serve --write" ${key}''
   ];
 
   nix.settings.trusted-users = [ "nix" ];