diff --git a/hosts/common/polyunfill.nix b/hosts/common/polyunfill.nix
index 6184ff60..6d35630a 100644
--- a/hosts/common/polyunfill.nix
+++ b/hosts/common/polyunfill.nix
@@ -17,6 +17,9 @@ in
   # remove a few items from /run/wrappers we don't need.
   options.security.wrappers = lib.mkOption {
     apply = lib.filterAttrs (name: _: !(builtins.elem name [
+      # from <repo:nixos/nixpkgs:nixos/modules/security/wrappers/default.nix>
+      "fusermount"  #< only needed if you want to mount entries declared in /etc/fstab or mtab as unprivileged user
+      "fusermount3"
       # from <repo:nixos/nixpkgs:nixos/modules/programs/shadow.nix>
       "newgidmap"
       "newgrp"