diff --git a/src/skills/style/nix/rules/dotfiles.md b/src/skills/style/nix/rules/dotfiles.md
index e76f42c..b6262fa 100644
--- a/src/skills/style/nix/rules/dotfiles.md
+++ b/src/skills/style/nix/rules/dotfiles.md
@@ -34,8 +34,8 @@ Host configuration provides deployment-specific values.
 
 ### Rule
 
-Set the secret's owner to a host user before SOPS decrypts it.
-Give the guest service group read access through a read-only bind mount.
+A host user owns each guest secret before SOPS decrypts it.
+Each guest service group accesses its secrets through a read-only bind mount.
 
 ### Rationale