diff --git a/pkgs/patched/browserpass/default.nix b/pkgs/patched/browserpass/default.nix
index ab3dd277..cc2cd854 100644
--- a/pkgs/patched/browserpass/default.nix
+++ b/pkgs/patched/browserpass/default.nix
@@ -16,7 +16,7 @@ let
     src = ./.;
 
     inherit bash gnused sops;
-    sane_scripts = sane-scripts;
+    sane_secrets_unlock = sane-scripts.secrets-unlock;  # XXX: must be snake_case
     installPhase = ''
       mkdir -p $out/bin
       substituteAll ${./sops-gpg-adapter} $out/bin/gpg
@@ -45,4 +45,8 @@ in
       mkdir -p $out/lib/mozilla/native-messaging-hosts
       ln -s $out/lib/browserpass/hosts/firefox/*.json $out/lib/mozilla/native-messaging-hosts
     '';
+
+    passthru = (upstream.passthru or {}) // {
+      inherit sane-browserpass-gpg;
+    };
   })
diff --git a/pkgs/patched/browserpass/sops-gpg-adapter b/pkgs/patched/browserpass/sops-gpg-adapter
index 3020380f..07f9283b 100644
--- a/pkgs/patched/browserpass/sops-gpg-adapter
+++ b/pkgs/patched/browserpass/sops-gpg-adapter
@@ -8,7 +8,7 @@ then
 fi
 
 # ensure the secret store is unlocked
-@sane_scripts@/bin/sane-secrets-unlock
+@sane_secrets_unlock@/bin/sane-secrets-unlock
 
 # using exec here forwards our stdin
 # browserpass parses the response in