diff --git a/nixos.nix b/nixos.nix
index 8f4b779..fa5ac98 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -118,7 +118,8 @@ in
                           env
                           ;
                         syscall = {
-                          inherit (app) devel multiarch bluetooth;
+                          inherit (app) multiarch bluetooth;
+                          deny_devel = !app.devel;
                         };
                         map_real_uid = app.mapRealUid;
                         no_new_session = app.tty;