diff --git a/pkgs/agenix.nix b/pkgs/agenix.nix
index 987d679..2bf47f7 100644
--- a/pkgs/agenix.nix
+++ b/pkgs/agenix.nix
@@ -3,6 +3,7 @@
   stdenv,
   age,
   jq,
+  gnused,
   nix,
   mktemp,
   diffutils,
@@ -18,6 +19,7 @@ in
     src = substituteAll {
       inherit ageBin version;
       jqBin = "${jq}/bin/jq";
+      sedBin = "${gnused}/bin/sed";
       nixInstantiate = "${nix}/bin/nix-instantiate";
       mktempBin = "${mktemp}/bin/mktemp";
       diffBin = "${diffutils}/bin/diff";
diff --git a/pkgs/agenix.sh b/pkgs/agenix.sh
index b78b441..1475965 100644
--- a/pkgs/agenix.sh
+++ b/pkgs/agenix.sh
@@ -115,7 +115,7 @@ function cleanup {
 trap "cleanup" 0 2 3 15
 
 function keys {
-    (@nixInstantiate@ --json --eval --strict -E "(let rules = import $RULES; in rules.\"$1\".publicKeys)" | @jqBin@ -r .[]) || exit 1
+    (@nixInstantiate@ --json --eval --strict -E "(let rules = import $RULES; in rules.\"$1\".publicKeys)" | @jqBin@ -r .[] | @sedBin@ '/^$/d') || exit 1
 }
 
 function decrypt {