diff --git a/common/security.nix b/common/security.nix
index 2d8eb528..f0b0421b 100644
--- a/common/security.nix
+++ b/common/security.nix
@@ -5,7 +5,7 @@
   pam = {
     u2f = {
       enable = true;
-      cue = true;
+      settings.cue = true;
     };
     #enableSSHAgentAuth = true;
   };