diff --git a/draupnir/production.yaml b/draupnir/production.yaml
index d4899e5..77d0d1a 100644
--- a/draupnir/production.yaml
+++ b/draupnir/production.yaml
@@ -7,7 +7,11 @@ pantalaimon:
   username: draupnir
   password: ""
 
-experimentalRustCrypto: false
+# The management room (and most Lotus rooms) are end-to-end encrypted. Without
+# crypto Draupnir can post there but can't read commands, so `!draupnir …` was
+# silently ignored (LotusGuild/cinny audit, 2026-10-13). Rust crypto stores its
+# keys under dataPath.
+experimentalRustCrypto: true
 
 dataPath: "/data/storage"