diff --git a/ChangeLog b/ChangeLog
index 68f95b8133..7760c5bace 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2007-12-12  Dan Williams  <dcbw@redhat.com>
+
+	* system-settings/src/nm-system-settings.conf
+		- Allow non-root clients (like the applet) to read settings
+
 2007-12-10  Tambet Ingo  <tambet@gmail.com>
 
 	* Replace all occurences of 'UMTS' with 'GSM'.
diff --git a/system-settings/src/nm-system-settings.conf b/system-settings/src/nm-system-settings.conf
index 8a3829d891..10184baede 100644
--- a/system-settings/src/nm-system-settings.conf
+++ b/system-settings/src/nm-system-settings.conf
@@ -6,13 +6,17 @@
 		<allow own="org.freedesktop.NetworkManagerSystemSettings"/>
 
 		<allow send_destination="org.freedesktop.NetworkManagerSystemSettings"/>
-		<allow send_interface="org.freedesktop.NetworkManagerSystemSettings"/>
+		<allow send_interface="org.freedesktop.NetworkManagerSettings"/>
+		<allow send_interface="org.freedesktop.NetworkManagerSettings.Secrets"/>
 	</policy>
 	<policy context="default">
 		<deny own="org.freedesktop.NetworkManagerSystemSettings"/>
 
-		<deny send_destination="org.freedesktop.NetworkManagerSystemSettings"/>
-		<deny send_interface="org.freedesktop.NetworkManagerSystemSettings"/>
+		<allow send_destination="org.freedesktop.NetworkManagerSystemSettings"/>
+		<allow send_interface="org.freedesktop.NetworkManagerSettings"/>
+
+		<!-- Only root can get secrets -->
+		<deny send_interface="org.freedesktop.NetworkManagerSettings.Secrets"/>
 	</policy>
 
         <limit name="max_replies_per_connection">512</limit>