diff --git a/README.md b/README.md
index 9163fdb..2420657 100644
--- a/README.md
+++ b/README.md
@@ -103,6 +103,9 @@ export NIX_CONFIG="experimental-features = nix-command flakes"
 sudo cryptsetup luksOpen /dev/sda2 cryptroot
 ```
 ``` bash
+mkdir -p /mnt/boot /mnt/nix /mnt/persist
+```
+``` bash
 sudo mount -o subvol=@nix /dev/mapper/cryptroot /mnt/nix
 ```
 ``` bash
diff --git a/hosts/desktop/default.nix b/hosts/desktop/default.nix
index 04cbddc..2edd983 100644
--- a/hosts/desktop/default.nix
+++ b/hosts/desktop/default.nix
@@ -8,7 +8,7 @@
 
   networking.hostName = "desktop";
 
-  users.users.root.hashedPassword = null;
+  users.users.root.hashedPassword = "!";
 
   users.users.user = {
     isNormalUser = true;
diff --git a/modules/secrets.nix b/modules/secrets.nix
index baa62ec..9556955 100644
--- a/modules/secrets.nix
+++ b/modules/secrets.nix
@@ -5,5 +5,6 @@
 
   sops.secrets.user-password = {
     sopsFile = ../secrets/user-password.yaml;
+    neededForUsers = true;
   };
 }