diff --git a/morph/grid/local/grid.nix b/morph/grid/local/grid.nix
index 4f9ec173385de06e540a8d342b9e48c00af36e30..a762186d3aaad642fe24aaf7666853fde79986b3 100644
--- a/morph/grid/local/grid.nix
+++ b/morph/grid/local/grid.nix
@@ -6,7 +6,7 @@ import ../../lib/make-grid.nix {
   config = ./config.json;
   nodes = cfg:
   let
-    sshUsers = import ./users.nix;
+    sshUsers = import ./secrets/users.nix;
     vpnClientIPs = [ "172.23.23.11" "172.23.23.12" "172.23.23.13" ]; # TBD: derive automatically
     # Get absolute vpn key directory path, as a string:
     monitoringvpnKeyDir = toString ./. + "/${cfg.monitoringvpnKeyDir}";
diff --git a/morph/grid/production/grid.nix b/morph/grid/production/grid.nix
index 69a17602f0499acaa8b45adca5e45c8acc637110..f5735d259dbff27f1d9cabbbca512af81d4550bb 100644
--- a/morph/grid/production/grid.nix
+++ b/morph/grid/production/grid.nix
@@ -6,7 +6,7 @@ import ../../lib/make-grid.nix {
   config = ./config.json;
   nodes = cfg:
     let
-      sshUsers = import ./users.nix;
+      sshUsers = import ./secrets/users.nix;
     in {
     # Here are the hosts that are in this morph network.  This is sort of like
     # a server manifest.  We try to keep as many of the specific details as
diff --git a/morph/grid/testing/grid.nix b/morph/grid/testing/grid.nix
index 90acab60b7bf6a12f2c5ff3ff93cb93e479491aa..065cd5faa5a5e90a657d1fd1a38e79266e6b6475 100644
--- a/morph/grid/testing/grid.nix
+++ b/morph/grid/testing/grid.nix
@@ -6,7 +6,7 @@ import ../../lib/make-grid.nix {
   config = ./config.json;
   nodes = cfg:
   let
-    sshUsers = import ./users.nix;
+    sshUsers = import ./secrets/users.nix;
   in {
     "payments" = import ../../lib/make-issuer.nix ({
       publicIPv4 = "18.194.183.13";