diff --git a/hydra-module.nix b/hydra-module.nix
index cb96ef10..3833fb80 100644
--- a/hydra-module.nix
+++ b/hydra-module.nix
@@ -197,6 +197,7 @@ in
           ''}
         '';
         serviceConfig.ExecStart = "${cfg.package}/bin/hydra-init";
+        serviceConfig.PermissionsStartOnly = true;
         serviceConfig.User = "hydra";
         serviceConfig.Type = "oneshot";
         serviceConfig.RemainAfterExit = true;