diff --git a/sso-mfa/k8s/keycape/configure-openbao-oidc.sh b/sso-mfa/k8s/keycape/configure-openbao-oidc.sh
index c3be11a..8106abd 100644
--- a/sso-mfa/k8s/keycape/configure-openbao-oidc.sh
+++ b/sso-mfa/k8s/keycape/configure-openbao-oidc.sh
@@ -73,7 +73,8 @@ ROLE_JSON
       default_role="platform-admin"
 
     bao write "auth/${mount}/role/platform-admin" @/tmp/openbao-platform-admin-role.json
-    printf "configured auth/%s/role/platform-admin\n" "$mount" >&2
+    bao write "sys/auth/${mount}/tune" listing_visibility=unauth
+    printf "configured auth/%s/role/platform-admin and listing_visibility=unauth\n" "$mount" >&2
   done
 
   rm -f /tmp/openbao-platform-admin-role.json /tmp/openbao-*-auth-enable.out /tmp/openbao-*-auth-enable.err