diff --git a/modules/blocks/lldap.nix b/modules/blocks/lldap.nix
index be29692..8fd9649 100644
--- a/modules/blocks/lldap.nix
+++ b/modules/blocks/lldap.nix
@@ -49,7 +49,6 @@ let
 in
 {
   imports = [
-    ./hardcodedsecret.nix
     ./mitmdump.nix
 
     (lib.mkRenamedOptionModule [ "shb" "ldap" ] [ "shb" "lldap" ])
diff --git a/modules/blocks/restic.nix b/modules/blocks/restic.nix
index c0bdd78..eec9cc3 100644
--- a/modules/blocks/restic.nix
+++ b/modules/blocks/restic.nix
@@ -105,10 +105,6 @@ let
   fullName = name: repository: "restic-backups-${name}_${repoSlugName repository.path}";
 in
 {
-  imports = [
-    ./hardcodedsecret.nix
-  ];
-
   options.shb.restic = {
     instances = mkOption {
       description = "Files to backup following the [backup contract](./contracts-backup.html).";
diff --git a/test/blocks/lldap.nix b/test/blocks/lldap.nix
index f6de9e0..6b288be 100644
--- a/test/blocks/lldap.nix
+++ b/test/blocks/lldap.nix
@@ -18,6 +18,7 @@ in
             shb.ssl.enable = lib.mkEnableOption "ssl";
           };
         }
+        ../../modules/blocks/hardcodedsecret.nix
         ../../modules/blocks/lldap.nix
       ];
 
diff --git a/test/blocks/restic.nix b/test/blocks/restic.nix
index 6adbca3..40c05dd 100644
--- a/test/blocks/restic.nix
+++ b/test/blocks/restic.nix
@@ -8,6 +8,8 @@ let
     nodes.machine = { config, ... }: {
       imports = [
         testLib.baseImports
+
+        ../../modules/blocks/hardcodedsecret.nix
         ../../modules/blocks/restic.nix
       ];