diff --git a/nixops/desktop.nix b/nixops/desktop.nix
index 686a399..f4455fd 100644
--- a/nixops/desktop.nix
+++ b/nixops/desktop.nix
@@ -65,8 +65,13 @@ in
   programs.wireshark.enable = true;
   programs.wireshark.package = pkgs.wireshark;
   virtualisation.libvirtd.enable = true;
-  virtualisation.libvirtd.qemuOvmf = true;
-  security.wrappers.spice-client-glib-usb-acl-helper.source = "${pkgs.spice-gtk}/bin/spice-client-glib-usb-acl-helper";
+  virtualisation.libvirtd.qemu.ovmf.enable = true;
+  security.wrappers.spice-client-glib-usb-acl-helper = {
+    source = "${pkgs.spice-gtk}/bin/spice-client-glib-usb-acl-helper";
+    owner = "root";
+    group = "root";
+    setuid = true;
+  };
 
   services.openssh.enable = true;
   services.openssh.forwardX11 = true;