diff --git a/.guix/guix-na/config/balg02.scm b/.guix/guix-na/config/balg02.scm
index e7a1522..8b50164 100644
--- a/.guix/guix-na/config/balg02.scm
+++ b/.guix/guix-na/config/balg02.scm
@@ -108,6 +108,8 @@
       (service openssh-service-type
 	       (openssh-configuration
 		(password-authentication? #f)
+                (permit-root-login 'prohibit-password)
+                (allow-agent-forwarding? #t)
 		(authorized-keys
 		 `(("auto" ,(local-file "../../../.pubkeys/deploy-key.pub"))
                    ("collin" ,(local-file "../../../.pubkeys/collin.pub"))