diff --git a/lib/fudo/auth/kerberos/kdc.nix b/lib/fudo/auth/kerberos/kdc.nix
index 3f1993e..e73d29d 100644
--- a/lib/fudo/auth/kerberos/kdc.nix
+++ b/lib/fudo/auth/kerberos/kdc.nix
@@ -323,14 +323,14 @@ let
                 ProtectKernelLogs = true;
                 MemoryDenyWriteExecute = true;
                 RestrictRealtime = true;
-                LimitNOFILE = 4096;
+                # LimitNOFILE = 4096;
                 User = cfg.user;
                 Group = cfg.group;
                 # Server will retry -- this results in stacking
                 Restart = "never";
                 AmbientCapabilities = "CAP_NET_BIND_SERVICE";
                 SecureBits = "keep-caps";
-                ReadWritePaths = [ "${dirOf cfg.kdc.database}" ];
+                # ReadWritePaths = [ "${dirOf cfg.kdc.database}" ];
                 ExecStart = pkgs.writeShellScript "launch-heimdal-hpropd.sh"
                   (concatStringsSep " " [
                     "${pkgs.heimdal}/libexec/heimdal/hpropd"