diff --git a/home/work/citrix.nix b/home/work/citrix.nix
index b732a19..f752d65 100644
--- a/home/work/citrix.nix
+++ b/home/work/citrix.nix
@@ -6,22 +6,15 @@ with lib; let
     config = pkgs.config // {
       allowUnfree = true;
       allowInsecure = true;
-      permittedInsecurePackages = ["libsoup-2.74.3"];
-      allowInsecurePredicate = pkg:
-        builtins.elem (lib.getName pkg) ["libsoup-2.74.3"];
     };
   };
 in {
   options.roles.citrix = {enable = lib.mkEnableOption "citrix tools";};
   config = mkIf cfg.enable {
-    nixpkgs.config.permittedInsecurePackages = ["libsoup-2.74.3"];
     home-manager.users.don.home.packages = with citrixPkgs; [ citrix_workspace ];
-    home-manager.users.don.nixpkgs.config = {
+    nixpkgs.config = {
       allowUnfree = true;
       allowInsecure = true;
-      permittedInsecurePackages = ["libsoup-2.74.3"];
-      allowInsecurePredicate = pkg:
-        builtins.elem (lib.getName pkg) ["libsoup-2.74.3"];
     };
     home-manager.users.don.home.file."ICAClient" = {
       recursive = true;
diff --git a/hosts/workstation/default.nix b/hosts/workstation/default.nix
index 0a88580..0d20bb1 100644
--- a/hosts/workstation/default.nix
+++ b/hosts/workstation/default.nix
@@ -305,7 +305,7 @@ in {
     config = {
       allowUnfree = true;
       allowUnfreePredicate = true;
-      permittedInsecurePackages = ["libsoup-2.74.3" "qtwebengine-5.15.19"];
+      permittedInsecurePackages = ["qtwebengine-5.15.19"];
       allowInsecurePredicate = pkg:
         builtins.elem (lib.getName pkg) ["broadcom-sta"];
     };
diff --git a/src/linuxx64-26.01.0.150.tar.gz b/src/linuxx64-26.01.0.150.tar.gz
new file mode 100644
index 0000000..3a958c6
Binary files /dev/null and b/src/linuxx64-26.01.0.150.tar.gz differ