diff --git a/ssh/.ssh/config b/ssh/.ssh/config
index 66aa892..fb984dd 100644
--- a/ssh/.ssh/config
+++ b/ssh/.ssh/config
@@ -92,7 +92,7 @@ Host bastion.service
 #  Hostname %h
 #
 Match exec "onsubnet --not 192.168.40." host *.service
+  User root
+  IdentityFile ~/.ssh/jails
   Hostname %h
   ProxyJump bastion.unbl.ink
-  User powellc
-  IdentityFile ~/.ssh/jails