diff --git a/dot_pam_environment.tmpl b/dot_pam_environment.tmpl
index 9c87032..cfd7061 100644
--- a/dot_pam_environment.tmpl
+++ b/dot_pam_environment.tmpl
@@ -38,8 +38,6 @@ RBENV_ROOT              DEFAULT=${XDG_DATA_HOME}/rbenv
 STACK_ROOT              DEFAULT=${XDG_DATA_HOME}/stack
 TEXMFHOME               DEFAULT=${XDG_CONFIG_HOME}/texmf
 RXVT_SOCKET             DEFAULT=${XDG_RUNTIME_DIR}/urxvt/urxvtd-node
-ICEAUTHORITY            DEFAULT=${XDG_CACHE_DIR}/ICEauthority
-XAUTHORITY              DEFAULT=${XDG_RUNTIME_DIR}/Xauthority
 XINITRC                 DEFAULT=${XDG_CONFIG_HOME}/X11/xinitrc
 XMONAD_CACHE_DIR        DEFAULT=${XDG_CACHE_HOME}/xmonad
 XMONAD_CONFIG_DIR       DEFAULT=${XDG_CONFIG_HOME}/xmonad
@@ -54,6 +52,8 @@ LESSHISTFILE            DEFAULT=-
 HISTFILE                DEFAULT=${XDG_DATA_HOME}/zsh_history.log
 HISTSIZE                DEFAULT=1000000
 SAVEHIST                DEFAULT=1000000
+ICEAUTHORITY            DEFAULT=${XDG_CACHE_DIR}/ICEauthority
+XAUTHORITY              DEFAULT=${XDG_RUNTIME_DIR}/Xauthority
 ZDOTDIR                 DEFAULT=${XDG_CONFIG_HOME}/zsh
 
 # store passwords in gnupg directory (and then encrypt the entire thing with veracrypt)