diff --git a/etc/systemd/resolved.conf b/etc/systemd/resolved.conf
index 2cd98a1..72639b3 100644
--- a/etc/systemd/resolved.conf
+++ b/etc/systemd/resolved.conf
@@ -3,4 +3,4 @@
 # Resolve mDNS hostnames via resolved, but leave the rest to Avahi
 MulticastDNS=resolve
 # Enable and enforce DNSSEC
-DNSSEC=true
+DNSSEC=allow-downgrade
diff --git a/run_once_flatpak-applications.sh b/run_once_flatpak-applications.sh
index 5ab6807..b4a618b 100644
--- a/run_once_flatpak-applications.sh
+++ b/run_once_flatpak-applications.sh
@@ -6,3 +6,4 @@ exec 2> >(while read line; do echo -e "\e[01;31m$line\e[0m"; done)
 flatpak install --noninteractive org.gnome.World.PikaBackup
 flatpak install --noninteractive org.gnome.Loupe
 flatpak install --noninteractive dev.deedles.Trayscale
+flatpak install --noninteractive org.gnome.gitlab.cheywood.Iotas