diff --git a/modules/optional/dev/default.nix b/modules/optional/dev/default.nix
index 4300169..de14d81 100644
--- a/modules/optional/dev/default.nix
+++ b/modules/optional/dev/default.nix
@@ -12,6 +12,9 @@
   environment.systemPackages = [pkgs.man-pages pkgs.man-pages-posix];
   environment.enableDebugInfo = true;
 
+  # Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users
+  nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
+
   services.nixseparatedebuginfod.enable = true;
   nix.settings.allowed-users = ["nixseparatedebuginfod"];
 }