Our paru configuration was in the wrong place all along and the doas change in an earlier commit did not actually work :).