diff --git a/morph/grid/local/grid.nix b/morph/grid/local/grid.nix
index 7f7101eb0ce4d993c706fdc121a5a59d323dd660..ae80a2af577909a513cee3dfc2c599f6fa97d0aa 100644
--- a/morph/grid/local/grid.nix
+++ b/morph/grid/local/grid.nix
@@ -12,6 +12,14 @@ let
     privateKeyPath = toString ./. + "/${rawConfig.privateKeyPath}";
   };
 
+  # Configure deployment management authorization for all systems in the grid.
+  deployment = {
+    services.private-storage.deployment = {
+      authorizedKey = config.deployKey;
+      gridName = "local";
+    };
+  };
+
   payments = {
     imports = [
       gridlib.issuer
@@ -19,9 +27,8 @@ let
       (gridlib.customize-issuer (config // {
           monitoringvpnIPv4 = "172.23.23.11";
       }))
+      deployment
     ];
-    services.private-storage.deployment.authorizedKey = config.deployKey;
-    services.private-storage.deployment.gridName = "local";
   };
 
   storage1 = {
@@ -32,9 +39,8 @@ let
         monitoringvpnIPv4 = "172.23.23.12";
         stateVersion = "19.09";
       }))
+      deployment
     ];
-    services.private-storage.deployment.authorizedKey = config.deployKey;
-    services.private-storage.deployment.gridName = "local";
   };
 
   storage2 = {
@@ -45,9 +51,8 @@ let
         monitoringvpnIPv4 = "172.23.23.13";
         stateVersion = "19.09";
       }))
+      deployment
     ];
-    services.private-storage.deployment.authorizedKey = config.deployKey;
-    services.private-storage.deployment.gridName = "local";
   };
 
   monitoring = {
@@ -60,9 +65,8 @@ let
         monitoringvpnIPv4 = "172.23.23.1";
         stateVersion = "19.09";
       })
+      deployment
     ];
-    services.private-storage.deployment.authorizedKey = config.deployKey;
-    services.private-storage.deployment.gridName = "local";
   };
 
   # TBD: derive these automatically: