diff --git a/krebs/3modules/exim.nix b/krebs/3modules/exim.nix
index cfcbbc438..274a943b1 100644
--- a/krebs/3modules/exim.nix
+++ b/krebs/3modules/exim.nix
@@ -50,15 +50,9 @@ in {
       '';
       systemPackages = [ pkgs.exim ];
     };
-    krebs.setuid = {
-      exim = {
-        filename = "${pkgs.exim}/bin/exim";
-        mode = "4111";
-      };
-      sendmail = {
-        filename = "${pkgs.exim}/bin/exim";
-        mode = "4111";
-      };
+    security.wrappers = {
+      exim.source = "${pkgs.exim}/bin/exim";
+      sendmail.source = "${pkgs.exim}/bin/exim";
     };
     systemd.services.exim = {
       restartTriggers = [