diff --git a/main.go b/main.go
index 628925a..3827eee 100644
--- a/main.go
+++ b/main.go
@@ -20,6 +20,10 @@ func main() {
 		log.Fatal(err)
 	}
 
+	if err := Unveil("/usr/local/bin/git", "rx"); err != nil {
+		log.Fatalf("unveil: %s", err)
+	}
+
 	if err := UnveilPaths([]string{
 		c.Dirs.Static,
 		c.Repo.ScanPath,
@@ -29,10 +33,6 @@ func main() {
 		log.Fatalf("unveil: %s", err)
 	}
 
-	if err := Unveil("/usr/local/bin/git", "rx"); err != nil {
-		log.Fatalf("unveil: %s", err)
-	}
-
 	mux := routes.Handlers(c)
 	addr := fmt.Sprintf("%s:%d", c.Server.Host, c.Server.Port)
 	log.Println("starting server on", addr)