diff --git a/flake.lock b/flake.lock
index 74ba51a..dac0598 100644
--- a/flake.lock
+++ b/flake.lock
@@ -5,11 +5,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1790636166,
-        "narHash": "sha256-hTOSqaTx/8PIWRxQ/lPE0+hIIXvebSZW1BuR8eTg6cw=",
+        "lastModified": 1792703502,
+        "narHash": "sha256-cypmdCoTGMSkKBdsyGaaucZgVxy3QDZrtl8q5i0Y12o=",
         "owner": "tomsch",
         "repo": "claude-desktop-nix",
-        "rev": "e4642c646667424962b05ee2b9da7e29a2c33a1c",
+        "rev": "1baf2e0296ab7fabc075db54a3d067acfa4ab5f4",
         "type": "github"
       },
       "original": {
@@ -25,11 +25,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1792000010,
-        "narHash": "sha256-4jtkwQlReQdXsKJJfB9yT7nIf0TlwgZOk2XtxjUgDS8=",
+        "lastModified": 1792703141,
+        "narHash": "sha256-3X34FaSeMJXMx8CK/BN6sZ9knwNauuiJXQhLM+bQQuI=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "5a9d300bd619c03857521b50c8877a19dbad7078",
+        "rev": "6750249c69969d09d952efaf3fab88a2bdac7ec6",
         "type": "github"
       },
       "original": {
@@ -45,11 +45,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1791711434,
-        "narHash": "sha256-LpIhxnuO0tYeZ4k7BbNMxsPs2zJpB4hWXO1jdhUuE7Q=",
+        "lastModified": 1792309949,
+        "narHash": "sha256-2DAEMk8YkV8OF6N2uw9jQ016cYoNkcgnq50AShwWxNw=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "9a2dd40780eeab8543aa97c59c26f11267025616",
+        "rev": "1b4d1758fa6053c5d6284254a793134fa602fbff",
         "type": "github"
       },
       "original": {
@@ -76,11 +76,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1791956154,
-        "narHash": "sha256-jBYGPi4udQ9uo4KQp9m2J0546nJVQitG15gvZSaVVAs=",
+        "lastModified": 1792502884,
+        "narHash": "sha256-IoNisKcGbUjdd45qCqywGMCYmZ5EnkxezvLII0FWwNA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "55bfb4d7437bd4e09ab7cba58a43bd68eb310044",
+        "rev": "02c087f3fe673c9e317f206a627cb6b910336dbe",
         "type": "github"
       },
       "original": {
diff --git a/hosts/fw/configuration.nix b/hosts/fw/configuration.nix
index 03d7e77..53412b4 100644
--- a/hosts/fw/configuration.nix
+++ b/hosts/fw/configuration.nix
@@ -398,6 +398,7 @@ with lib;
     ffmpeg
     file
     fprintd
+    freerdp
     gcc
     gdu
     gh
@@ -413,7 +414,6 @@ with lib;
     jless
     jq
     kdotool
-    keepassxc
     ksh
     libarchive
     libreoffice
@@ -483,6 +483,15 @@ with lib;
     yt-dlp
     yubioath-flutter
 
+    (pkgs.symlinkJoin {
+      name = "keepassxc";
+      paths = [ pkgs.keepassxc ];
+      nativeBuildInputs = [ pkgs.makeWrapper ];
+      postBuild = ''
+        wrapProgram $out/bin/keepassxc --set QT_LINUX_ACCESSIBILITY_ALWAYS_ON 1
+      '';
+    })
+    keepassxc
     (pkgs.writeShellScriptBin "kpxc-search" ''
       export GI_TYPELIB_PATH=${pkgs.lib.makeSearchPath "lib/girepository-1.0" [
         pkgs.at-spi2-core pkgs.glib.out pkgs.gobject-introspection
diff --git a/hosts/fw/scripts/kpxc-search b/hosts/fw/scripts/kpxc-search
index 0ac7d63..07cec3d 100755
--- a/hosts/fw/scripts/kpxc-search
+++ b/hosts/fw/scripts/kpxc-search
@@ -88,6 +88,10 @@ def is_line_edit(role, states):
         and states is not None
         and states.contains(Atspi.StateType.SHOWING)
         and states.contains(Atspi.StateType.EDITABLE)
+        # A disabled (greyed-out) field still reports EDITABLE, e.g. the
+        # search box while the database is locked.
+        and states.contains(Atspi.StateType.ENABLED)
+        and states.contains(Atspi.StateType.SENSITIVE)
         and not states.contains(Atspi.StateType.MULTI_LINE)
     )
 
diff --git a/modules/home-manager/bash.nix b/modules/home-manager/bash.nix
index 6dc6cfc..915d54e 100644
--- a/modules/home-manager/bash.nix
+++ b/modules/home-manager/bash.nix
@@ -10,7 +10,7 @@
          source "${pkgs.bash-completion}/etc/profile.d/bash_completion.sh"
       fi
 
-      [ "$DISPLAY" ] && xset r rate 300 60
+      [ "$DISPLAY" ] && [ ! "$DISPLAY" = needs-to-be-defined ] && xset r rate 300 60
 
       #-##################### user specific aliases and functions ######################
       if [ -d ~/.bashrc.d ]; then
@@ -107,6 +107,7 @@
       respawn_shell () {
           : 'Intelligently respawn shell'
           : 'pure posix sh without forking'
+          : 'actually, exec -l is not posix, and exec -l /proc/self/exe does not make a lot of sense'
           if [ "''${BASH_VERSINFO-}" ] && command -v bash 1>/dev/null 2>&1; then
               if _is_login_shell; then
                   exec bash -l