diff --git a/modules/features/mtls.nix b/modules/features/mtls.nix
index f1a09ef..7b8d88b 100644
--- a/modules/features/mtls.nix
+++ b/modules/features/mtls.nix
@@ -422,6 +422,9 @@ in
             ''}
             '';
           };
+        extraPackages = [
+          config.pkgs.step-cli
+        ];
         systemd = {
           description = "Automatic mTLS renewal service";
           documentation = [
@@ -431,6 +434,7 @@ in
           after = [ "network-online.target" ];
           wants = [ "network-online.target" ];
           serviceConfig.Type = lib.mkDefault "oneshot";
+          # serviceConfig.ExecCondition = "";
         };
       };
     });