diff --git a/lib/fudo/auth/kerberos/kdc.nix b/lib/fudo/auth/kerberos/kdc.nix
index d9d9d1d..7b6d374 100644
--- a/lib/fudo/auth/kerberos/kdc.nix
+++ b/lib/fudo/auth/kerberos/kdc.nix
@@ -312,25 +312,6 @@ let
               description = "Heimdal propagation listener server.";
               path = with pkgs; [ heimdal ];
               serviceConfig = {
-                StandardInput = "socket";
-                StandardOutput = "socket";
-                PrivateDevices = true;
-                PrivateTmp = true;
-                ProtectControlGroups = true;
-                ProtectKernelTunables = true;
-                ProtectHostname = true;
-                ProtectClock = true;
-                ProtectKernelLogs = true;
-                MemoryDenyWriteExecute = true;
-                RestrictRealtime = true;
-                LimitNOFILE = "4096";
-                User = cfg.user;
-                Group = cfg.group;
-                # Server will retry -- this results in stacking
-                Restart = "never";
-                AmbientCapabilities = "CAP_NET_BIND_SERVICE";
-                SecureBits = "keep-caps";
-                #ReadWritePaths = [ "${dirOf cfg.kdc.database}" ];
                 ExecStart = let
                   startScript = pkgs.writeShellScript "launch-heimdal-hpropd.sh"
                     (concatStringsSep " " [