diff --git a/home/desktop/hyprland.nix b/home/desktop/hyprland.nix
index 690e9dd..d993112 100644
--- a/home/desktop/hyprland.nix
+++ b/home/desktop/hyprland.nix
@@ -21,7 +21,6 @@ in {
         "${lib.getExe pkgs.mako}"
         "${lib.getExe pkgs.thunderbird}"
         "${pkgs.wl-clipboard}/bin/wl-paste --watch ${lib.getExe pkgs.cliphist} store"
-        "${pkgs.gnome-keyring}/bin/gnome-keyring-daemon --start --components=secrets"
         "${pkgs.hyprland}/bin/hyprctl setcursor catppuccin-${cursor.flavor}-${cursor.accent}-cursors 24" # FIXME: shouldn't be necessary
       ];
 
diff --git a/hosts/aurum/system/security.nix b/hosts/aurum/system/security.nix
index 6d74197..b317579 100644
--- a/hosts/aurum/system/security.nix
+++ b/hosts/aurum/system/security.nix
@@ -1,23 +1,20 @@
-{pkgs, ...}: {
+{...}: {
   # enable polkit
   security.polkit.enable = true;
 
-  # enable gpg agent
-  programs.gnupg.agent = {
-    enable = true;
-    enableSSHSupport = true;
-    pinentryPackage = pkgs.pinentry-gnome3;
-  };
-
-  # secrets keyring
-  services.gnome.gnome-keyring.enable = true;
-
-  # seahorse secret manager
-  programs.seahorse.enable = true;
-
   # RealtimeKit system
   security.rtkit.enable = true;
 
   # allow swaylock to use pam
   security.pam.services.swaylock = {};
+
+  # enable ssh agent
+  programs.ssh = {
+    startAgent = true;
+    agentTimeout = "1h";
+  };
+
+  # # ssh-askpass replacement
+  # programs.ssh.enableAskPassword = true;
+  # programs.seahorse.enable = true;
 }