diff --git a/bin/executable_php-private b/bin/executable_php-private
index 2d7157f..e7684c8 100644
--- a/bin/executable_php-private
+++ b/bin/executable_php-private
@@ -2,4 +2,4 @@
 
 php="$(basename "$0")"
 
-exec "/usr/bin/$php" -n -c "$HOME/.config/php/${php##php}/php.ini" "$@"
+exec nix shell "github:loophp/nix-shell#${php}" --command php "$@"
diff --git a/bin/executable_showcert b/bin/executable_showcert
index 5caf587..3ecb4bd 100644
--- a/bin/executable_showcert
+++ b/bin/executable_showcert
@@ -3,7 +3,10 @@
 [[ -z $1 ]] && { echo "where to get the cert?" >&2; exit 1; }
 
 fetch() {
-    if [[ -f $1 ]]
+    if [[ $1 == "-" ]]
+    then
+        cat
+    elif [[ -f $1 ]]
     then
         fetch_file $1
     else
@@ -19,12 +22,14 @@ fetch_file() {
     cat $1
 }
 
-coproc fetch $1 | openssl x509 -in /dev/stdin -noout -subject -issuer -startdate -enddate -ext subjectAltName | sed '/X509v3 Subject Alternative Name/ {n ; s/DNS://g ; s/, /\n    /g;}'
+coproc openssl x509 -in /dev/stdin -noout -subject -issuer -startdate -enddate -ext subjectAltName | sed '/X509v3 Subject Alternative Name/ {n ; s/DNS://g ; s/, /\n    /g;}'
+
+fetch $1 >&p
 
 exec 3> >(LC_ALL=C sort)
 
 sort=0
-while read -p line
+while read -t 0.5 -p line
 do
     if [[ $line = notBefore=* ]]
     then
diff --git a/dot_config/herbstluftwm/executable_autostart.tmpl b/dot_config/herbstluftwm/executable_autostart.tmpl
index 3d30cb4..ef9acde 100644
--- a/dot_config/herbstluftwm/executable_autostart.tmpl
+++ b/dot_config/herbstluftwm/executable_autostart.tmpl
@@ -241,7 +241,7 @@ hc unlock
 
 systemctl --user import-environment DISPLAY XAUTHORITY XDG_SESSION_PATH
 
-systemctl restart --user "hlwm.target"
+systemctl restart --no-block --user "hlwm.target"
 
 #monitors=$(hc list_monitors | awk -F":" '{print $1}')
 #panel_height=18
diff --git a/dot_config/picom/picom.conf b/dot_config/picom/picom.conf
index 5eddcda..71ef99b 100644
--- a/dot_config/picom/picom.conf
+++ b/dot_config/picom/picom.conf
@@ -103,7 +103,7 @@ fade-out-step = 0.03;
 
 # Opacity of inactive windows. (0.1 - 1.0, defaults to 1.0)
 # inactive-opacity = 1
-inactive-opacity = 0.95;
+inactive-opacity = 1;
 
 # Opacity of window titlebars and borders. (0.1 - 1.0, disabled by default)
 # frame-opacity = 1.0
diff --git a/private_dot_ssh/encrypted_config.asc b/private_dot_ssh/encrypted_config.asc
index 4fc1d84..5bc7d4e 100644
--- a/private_dot_ssh/encrypted_config.asc
+++ b/private_dot_ssh/encrypted_config.asc
@@ -1,23 +1,24 @@
 -----BEGIN PGP MESSAGE-----
 
-hQEMAxv3WLbCRER9AQgAkH/5o+oK3NGGdLg+8Zo6/n6fI8G5Pkpuz9Vb3+1tVzQg
-uzAnHDd3EuliqayOyd7x9kAqrwhhCjAqz8lrJ4jhli3/vnFEZvsi6gf0l1nQE04E
-ypNT+EzuO9d+xsBz3vc+o8ajq4QlX6WL4zgvWFwIagj0tDLrDaN7dlk5hnYlvO9C
-1FCmP/hpsk5G/xACVVLHqmQNoEGpaW01SeEIuerP23ZfpJc93/46VpFJn/K/iRTL
-N4xgfeF9kyA3zvF+oodU5AXm8fahmrC9ShxYcQix/06J8sIjaqAncbQQuBGf/oAa
-/wLpIbb9gxW17RZ8yX2ggHR+JnS0Dp8YaIhXwLaMA9LpAeg+j3iWB+k/W+ERGAkC
-M59exSSknmpy5udRcPATcBkH0nZltbKnmZiNAKKpy9+XH5M/eItMhEU5UfXWqXTN
-p+JyoD7AneQEgPct4NoOQx39dj6qX7l7kDjSBJ56eWbibh6yDdJrt9p/REEJ7bba
-UysINla8iyGSv1IwhBNnT+HiWCWHVuU2qk3CMbhq4Tpv2mlCFgaicGnV6aVf1Iw+
-PxFWu7ZsgpHHOhlXFDUY5S1DbfFPhbmuDdgX3Ni3HA5zS/qgUJHHJsdhlOLg9tHQ
-cYJ09Mqtn29CmllFqHgQs59iP+N+4QZH6MMrsAQIXkJr2muWyCcuoevr8gx8XLow
-RD8eBal4N93L8liISX4AUcA3sZP4K3VYbPmMoXAkDXb/TO9q7j9G2AnodNiK5KZn
-AONbT5y+TuTA3O4bhnWCexgsapx/e+CtfFsNSmos7viW+e7OsTMEgFbhY4RE3BfP
-KgTCVTS/RWbdKBs1hdivBxRm+yMXCuFzOs/gSkfHWlGvVsevvYOOUZDXQZg9G95F
-R8DqsTwI3/ibpdkE6mz2HADHS30IpleErifgUo+xG2wQqWt8u9MaV1xH6f6DWY6B
-ksTSGdtzjw5GjPNm/Hm5AqGvzKaOucDdv6aDaElrxIynNeZEKs22pnNEC2iSIvRT
-8pYK85tt/BsclhW/fbBbW7NgjIv5B5felTNBLvHWpR+YoMHuVJvj+8OIXAlIJKOJ
-x0783B51DUi1NPw12C2u2z4S/9YOHNaOaiUrRuQWEaNxjfkhrF5jnbxEX4/645wr
-qwldUxmnks9n9kl7hDFD+3DV
-=NUGJ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+=nRXU
 -----END PGP MESSAGE-----