diff --git a/nameserver.nix b/nameserver.nix
index 00106dc..fa3af16 100644
--- a/nameserver.nix
+++ b/nameserver.nix
@@ -28,6 +28,9 @@
     providerKey.secret = config.secrets.dnscrypt.sec;
   };
 
+  # This is needed for the rotation of DNSCrypt keys
+  security.polkit.enable = true;
+
   # Namecoin resolver
   services.ncdns = {
     enable = true;