diff --git a/.sandstorm/launcher.sh b/.sandstorm/launcher.sh
index 70b83848b..74ea0a060 100755
--- a/.sandstorm/launcher.sh
+++ b/.sandstorm/launcher.sh
@@ -29,4 +29,4 @@ set -euo pipefail
 mkdir -p /var/lib/hledger
 touch /var/lib/hledger/Ledger
 cd /var
-hledger-web --serve --base-url='' -f /var/lib/hledger/Ledger --port 8000
+hledger-web --capabilities-header=X-Sandstorm-Permissions --serve --base-url='' -f /var/lib/hledger/Ledger --port 8000