diff --git a/files/usr.bin.securedrop-client b/files/usr.bin.securedrop-client
index f4366414a..c3184de04 100644
--- a/files/usr.bin.securedrop-client
+++ b/files/usr.bin.securedrop-client
@@ -21,11 +21,16 @@
   /opt/venvs/securedrop-client/** r,
   /opt/venvs/securedrop-client/bin/alembic mrix,
   /opt/venvs/securedrop-client/bin/python3 ix,
+  /usr/bin/python3.9 ix,
   /opt/venvs/securedrop-client/bin/sd-client mrix,
   /opt/venvs/securedrop-client/lib/python3.7/site-packages/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so mr,
   /opt/venvs/securedrop-client/lib/python3.7/site-packages/sqlalchemy/cprocessors.cpython-37m-x86_64-linux-gnu.so mr,
   /opt/venvs/securedrop-client/lib/python3.7/site-packages/sqlalchemy/cresultproxy.cpython-37m-x86_64-linux-gnu.so mr,
   /opt/venvs/securedrop-client/lib/python3.7/site-packages/sqlalchemy/cutils.cpython-37m-x86_64-linux-gnu.so mr,
+  /opt/venvs/securedrop-client/lib/python3.9/site-packages/markupsafe/_speedups.cpython-39-x86_64-linux-gnu.so mr,
+  /opt/venvs/securedrop-client/lib/python3.9/site-packages/sqlalchemy/cprocessors.cpython-39-x86_64-linux-gnu.so mr,
+  /opt/venvs/securedrop-client/lib/python3.9/site-packages/sqlalchemy/cresultproxy.cpython-39-x86_64-linux-gnu.so mr,
+  /opt/venvs/securedrop-client/lib/python3.9/site-packages/sqlalchemy/cutils.cpython-39-x86_64-linux-gnu.so mr,
   /proc/cpuinfo r,
   /proc/filesystems r,
   /sys/devices/system/cpu/online r,
@@ -70,6 +75,8 @@
   owner /home/user/QubesIncoming/sd-proxy/* rw,
   owner /opt/venvs/securedrop-client/lib/python3.7/**/__pycache__/* rw,
   owner /opt/venvs/securedrop-client/lib/python3.7/__pycache__/* rw,
+  owner /opt/venvs/securedrop-client/lib/python3.9/**/__pycache__/* rw,
+  owner /opt/venvs/securedrop-client/lib/python3.9/__pycache__/* rw,
   owner /proc/*/cmdline r,
   owner /proc/*/fd/ r,
   owner /usr/share/securedrop-client/** rw,