diff --git a/base/default.nix b/base/default.nix
index 53dbee1..c61d0f1 100644
--- a/base/default.nix
+++ b/base/default.nix
@@ -86,6 +86,8 @@
     Defaults lecture = never
   '';
 
+  users.mutableUsers = lib.mkDefault false;
+
   users.groups."drift".name = "drift";
 
   # Trusted users on the nix builder machines