diff --git a/roles/koji_builder/templates/kojid.conf b/roles/koji_builder/templates/kojid.conf
index c6e330ba1e..9bb9a29dc1 100644
--- a/roles/koji_builder/templates/kojid.conf
+++ b/roles/koji_builder/templates/kojid.conf
@@ -63,10 +63,11 @@ ca = /etc/kojid/cacert.pem
 ;certificate of the CA that issued the HTTP server certificate
 serverca = /etc/kojid/cacert.pem
 
-; Let's try the runroot plugin in staging.
+{% if 'runroot' in group_names %}
 ; Config for it lives in /etc/kojid/runroot.conf
 plugins = runroot
 
 ; We use the hub's plugin path since that's where
 ; the package installs the builder plugin.
 pluginpath = /usr/lib/koji-hub-plugins
+{% endif %}