diff --git a/dovecot.nix b/dovecot.nix
index 97c1e13..e004db7 100644
--- a/dovecot.nix
+++ b/dovecot.nix
@@ -119,9 +119,7 @@ in
   security = lib.mkIf config.variables.useSSL {
     acme.certs."dovecot2.${config.variables.myFQDN}" = {
       domain = "${config.variables.myFQDN}";
-      user = config.services.nginx.user;
       group = config.services.dovecot2.group;
-      allowKeysForGroup = true;
       postRun = "systemctl restart dovecot2.service";
       # cheat by getting the webroot from another certificate configured through nginx.
       webroot = config.security.acme.certs."${config.variables.myFQDN}".webroot;
diff --git a/postfix.nix b/postfix.nix
index 5473c75..5f897e5 100644
--- a/postfix.nix
+++ b/postfix.nix
@@ -38,7 +38,6 @@ in
     acme.certs."postfix.${config.variables.myFQDN}" = {
       domain = "${config.variables.myFQDN}";
       group = config.services.postfix.group;
-      allowKeysForGroup = true;
       postRun = "systemctl restart postfix.service";
       # cheat by getting some settings from another certificate configured through nginx.
       user = config.security.acme.certs."${config.variables.myFQDN}".user;