diff --git a/secrets/default.nix b/secrets/default.nix
index cbd910c..e91a685 100644
--- a/secrets/default.nix
+++ b/secrets/default.nix
@@ -26,11 +26,11 @@ in
         inherit (secrets)
           "infinidoge-password"
           "root-password"
-          "binary-cache-private-key"
           "borg-ssh-key"
           ;
 
         "borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
+        "binary-cache-private-key" = secrets.binary-cache-private-key // lib.optionalAttrs config.services.hydra.enable { group = "hydra"; mode = "440"; };
       }
       (mkIf config.services.nginx.enable {
         inherit (secrets) "cloudflare";