diff --git a/groups/all/default.nix b/groups/all/default.nix
index 70b682d..3f851c9 100644
--- a/groups/all/default.nix
+++ b/groups/all/default.nix
@@ -12,7 +12,7 @@
 
   # NOTE: mkDefault is 1000 and mkForce is 50
   # NOTE: so this is like a second mkDefault
-  security.sudo.wheelNeedsPassword = lib.mkOverride 900 true;
+  security.sudo.wheelNeedsPassword = lib.mkDefault true;
 
   networking = {
     networkmanager.enable = true;
@@ -42,7 +42,7 @@
 
   time.timeZone = lib.mkDefault "Australia/Brisbane";
 
-  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.defaultLocale = lib.mkDefault "en_US.UTF-8";
   console = {
     font = "Lat2-Terminus16";
     keyMap = "us";
diff --git a/groups/server/default.nix b/groups/server/default.nix
index 5c447fc..6182ef1 100644
--- a/groups/server/default.nix
+++ b/groups/server/default.nix
@@ -44,7 +44,7 @@
         isNormalUser = true;
         home = "/home/cry";
         extraGroups = ["wheel"];
-        openssh.authorizedKeys.keys = lib.mkOverride 900 [
+        openssh.authorizedKeys.keys = lib.mkDefault [
           (throw ''
             Hosts in the `server` group must set `users.users.cry.openssh.authorizedKeys.keys = [ ... ]`.
           '')