diff --git a/hosts/common.nix b/hosts/common.nix
index cd16f8c..502f3b5 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -10,6 +10,8 @@ in {
     "ssh/nix-builders/isvegg/key" = { sopsFile = ./../secrets/common.yaml; };
     "ssh/nix-builders/bob/key" = { sopsFile = ./../secrets/common.yaml; };
     # "ssh/nix-builders/isvegg/pub" = { };
+
+    "nix/access-tokens" = { sopsFile = ./../secrets/common.yaml; };
   };
 
   nix = {
@@ -28,6 +30,10 @@ in {
       use-xdg-base-directories = true;
     };
 
+    extraOptions = ''
+      !include ${config.sops.secrets."nix/access-tokens".path}
+    '';
+
     buildMachines = [
       # {
       #   # Login details configured in ssh module in nix-secrets