diff --git a/hosts/common/programs/imagemagick.nix b/hosts/common/programs/imagemagick.nix
index 9d30a795..2d73cadd 100644
--- a/hosts/common/programs/imagemagick.nix
+++ b/hosts/common/programs/imagemagick.nix
@@ -4,7 +4,7 @@
     sandbox.method = "bwrap";
     sandbox.wrapperType = "wrappedDerivation";
     sandbox.whitelistPwd = true;
-    sandbox.autodetectCliPaths = true;  #< arg formatting is complicated enough that this won't always work.
+    sandbox.autodetectCliPaths = "existingFileOrParent";  #< arg formatting is complicated enough that this won't always work.
     packageUnwrapped = pkgs.imagemagick.override {
       ghostscriptSupport = true;
     };
diff --git a/hosts/common/programs/neovim.nix b/hosts/common/programs/neovim.nix
index 317c0c3d..1102aef4 100644
--- a/hosts/common/programs/neovim.nix
+++ b/hosts/common/programs/neovim.nix
@@ -88,7 +88,7 @@ in
   sane.programs.neovim = {
     sandbox.method = "bwrap";
     sandbox.wrapperType = "wrappedDerivation";
-    sandbox.autodetectCliPaths = true;
+    sandbox.autodetectCliPaths = "existingFileOrParent";
     # sandbox.whitelistPwd = true;
     sandbox.extraHomePaths = [
       # directories where i'm liable to `:e ../...`