diff --git a/kanidm_rlm_python/config.ini b/kanidm_rlm_python/config.ini
index 7a7c71e10..159512e1c 100644
--- a/kanidm_rlm_python/config.ini
+++ b/kanidm_rlm_python/config.ini
@@ -4,7 +4,6 @@ strict = false
 ca = /data/ca.crt
 user =
 secret =
-required_group =
 
 ; default vlans for groups that don't specify one.
 [DEFAULT]
@@ -18,6 +17,7 @@ ca =
 key = 
 cert = 
 dh = 
+required_group =
 
 ; [client.localhost]
 ; ipaddr =