diff --git a/modules/persist/stores/ephemeral/default.nix b/modules/persist/stores/ephemeral/default.nix
index bc8b55846..76c5cff16 100644
--- a/modules/persist/stores/ephemeral/default.nix
+++ b/modules/persist/stores/ephemeral/default.nix
@@ -10,7 +10,7 @@ let
   fsType = "fuse3.sane";
   options = [
     "nodev"   # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev`
-    "nosuid"  # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
+    # "nosuid"  # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
     "allow_other"  # root ends up being the user that mounts this, so need to make it visible to other users.
     # "defaults"  # "unknown flag: --defaults. Try 'gocryptfs -help'"
     "pass_fuse_fd"
diff --git a/modules/persist/stores/private/default.nix b/modules/persist/stores/private/default.nix
index 825188e5e..b025879b9 100644
--- a/modules/persist/stores/private/default.nix
+++ b/modules/persist/stores/private/default.nix
@@ -13,7 +13,7 @@ let
     "nofail"
     # "noexec"  # handful of scripts in ~/knowledge that are executable
     "nodev"   # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev`
-    "nosuid"  # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
+    # "nosuid"  # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
     "allow_other"  # root ends up being the user that mounts this, so need to make it visible to other users.
     # "quiet"
     # "defaults"  # "unknown flag: --defaults. Try 'gocryptfs -help'"