diff --git a/incus/main.tf b/incus/main.tf
index ff092a9..d561f38 100644
--- a/incus/main.tf
+++ b/incus/main.tf
@@ -5,6 +5,8 @@ resource "incus_profile" "d" {
     "limits.cpu"       = 2
     "security.nesting" = true
     "boot.autostart"   = true
+    "security.privileged" = false
+    "security.syscalls.intercept.mount" = false
   }
 
   # device {