diff --git a/keys.nix b/keys.nix
index a2b8c2c..f3a6bcf 100644
--- a/keys.nix
+++ b/keys.nix
@@ -13,7 +13,8 @@ rec {
   };
 
   hostGroup = with hosts; rec {
-    compute    = [ owl1 owl2 fox ];
+    untrusted  = [ fox ];
+    compute    = [ owl1 owl2 ];
     playground = [ eudy koro ];
     storage    = [ bay lake2 ];
     monitor    = [ hut ];