diff --git a/backend/windmill-worker/nsjail/download.py.config.proto b/backend/windmill-worker/nsjail/download.py.config.proto
index 82dc08f5ea..48d0600cc3 100644
--- a/backend/windmill-worker/nsjail/download.py.config.proto
+++ b/backend/windmill-worker/nsjail/download.py.config.proto
@@ -46,28 +46,8 @@ mount {
 }
 
 mount {
-    src: "/etc/ssl"
-    dst: "/etc/ssl"
-	is_bind: true
-}
-
-mount {
-    src: "/etc/pki"
-    dst: "/etc/pki"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/ca-certificates"
-    dst: "/etc/ca-certificates"
-	is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/resolv.conf"
-    dst: "/etc/resolv.conf"
+    src: "/etc"
+    dst: "/etc"
 	is_bind: true
 }
 
diff --git a/backend/windmill-worker/nsjail/run.bash.config.proto b/backend/windmill-worker/nsjail/run.bash.config.proto
index dcb43ca4a1..e93e6b4557 100644
--- a/backend/windmill-worker/nsjail/run.bash.config.proto
+++ b/backend/windmill-worker/nsjail/run.bash.config.proto
@@ -66,36 +66,8 @@ mount {
 }
 
 mount {
-    src: "/etc/ssl"
-    dst: "/etc/ssl"
-	is_bind: true
-}
-
-
-mount {
-    src: "/etc/ld.so.cache"
-    dst: "/etc/ld.so.cache"
-	is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/pki"
-    dst: "/etc/pki"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/ca-certificates"
-    dst: "/etc/ca-certificates"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/resolv.conf"
-    dst: "/etc/resolv.conf"
+    src: "/etc"
+    dst: "/etc"
 	is_bind: true
 }
 
@@ -105,6 +77,12 @@ mount {
     is_bind: true
 }
 
+mount {
+    src: "/dev/urandom"
+    dst: "/dev/urandom"
+    is_bind: true
+}
+
 iface_no_lo: true
 
 {SHARED_MOUNT}
diff --git a/backend/windmill-worker/nsjail/run.deno.config.proto b/backend/windmill-worker/nsjail/run.deno.config.proto
index f1b0177943..9f106c231f 100644
--- a/backend/windmill-worker/nsjail/run.deno.config.proto
+++ b/backend/windmill-worker/nsjail/run.deno.config.proto
@@ -93,28 +93,8 @@ mount {
 }
 
 mount {
-    src: "/etc/ssl"
-    dst: "/etc/ssl"
-	is_bind: true
-}
-
-mount {
-    src: "/etc/pki"
-    dst: "/etc/pki"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/ca-certificates"
-    dst: "/etc/ca-certificates"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/resolv.conf"
-    dst: "/etc/resolv.conf"
+    src: "/etc"
+    dst: "/etc"
 	is_bind: true
 }
 
@@ -124,6 +104,12 @@ mount {
     is_bind: true
 }
 
+mount {
+    src: "/dev/urandom"
+    dst: "/dev/urandom"
+    is_bind: true
+}
+
 mount {
     src: "{CACHE_DIR}"
     dst: "/tmp/.cache/deno"
diff --git a/backend/windmill-worker/nsjail/run.go.config.proto b/backend/windmill-worker/nsjail/run.go.config.proto
index 007b9edb64..3af548d18c 100644
--- a/backend/windmill-worker/nsjail/run.go.config.proto
+++ b/backend/windmill-worker/nsjail/run.go.config.proto
@@ -79,30 +79,9 @@ mount {
     is_bind: true
 }
 
-
 mount {
-    src: "/etc/ssl"
-    dst: "/etc/ssl"
-	is_bind: true
-}
-
-mount {
-    src: "/etc/pki"
-    dst: "/etc/pki"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/ca-certificates"
-    dst: "/etc/ca-certificates"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/resolv.conf"
-    dst: "/etc/resolv.conf"
+    src: "/etc"
+    dst: "/etc"
 	is_bind: true
 }
 
@@ -112,6 +91,12 @@ mount {
     is_bind: true
 }
 
+mount {
+    src: "/dev/urandom"
+    dst: "/dev/urandom"
+    is_bind: true
+}
+
 iface_no_lo: true
 
 mount {
diff --git a/backend/windmill-worker/nsjail/run.python3.config.proto b/backend/windmill-worker/nsjail/run.python3.config.proto
index 78a1aaf93b..0c05a08cc3 100644
--- a/backend/windmill-worker/nsjail/run.python3.config.proto
+++ b/backend/windmill-worker/nsjail/run.python3.config.proto
@@ -92,28 +92,8 @@ mount {
 }
 
 mount {
-    src: "/etc/ssl"
-    dst: "/etc/ssl"
-	is_bind: true
-}
-
-mount {
-    src: "/etc/pki"
-    dst: "/etc/pki"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/ca-certificates"
-    dst: "/etc/ca-certificates"
-    is_bind: true
-    mandatory: false
-}
-
-mount {
-    src: "/etc/resolv.conf"
-    dst: "/etc/resolv.conf"
+    src: "/etc"
+    dst: "/etc"
 	is_bind: true
 }
 
@@ -123,6 +103,12 @@ mount {
     is_bind: true
 }
 
+mount {
+    src: "/dev/urandom"
+    dst: "/dev/urandom"
+    is_bind: true
+}
+
 {SHARED_MOUNT}
 
 {SHARED_DEPENDENCIES}