diff --git a/acme/api/order_test.go b/acme/api/order_test.go
index 6a282ace..59c231ab 100644
--- a/acme/api/order_test.go
+++ b/acme/api/order_test.go
@@ -1715,9 +1715,7 @@ func TestHandler_NewOrder(t *testing.T) {
 						Now:                        time.Now,
 					},
 				},
-				DPOP: &provisioner.DPOPOptions{
-					ValidationExecPath: "true", // true will always exit with code 0
-				},
+				DPOP: &provisioner.DPOPOptions{},
 			})
 			acc := &acme.Account{ID: "accID"}
 			nor := &NewOrderRequest{
diff --git a/acme/api/wire_integration_test.go b/acme/api/wire_integration_test.go
index 45f28d2d..ab3e2042 100644
--- a/acme/api/wire_integration_test.go
+++ b/acme/api/wire_integration_test.go
@@ -70,9 +70,7 @@ func TestWireIntegration(t *testing.T) {
 				Now:                        time.Now,
 			},
 		},
-		DPOP: &provisioner.DPOPOptions{
-			ValidationExecPath: "true", // true will always exit with code 0
-		},
+		DPOP: &provisioner.DPOPOptions{},
 	})
 
 	// mock provisioner and linker
diff --git a/authority/provisioner/dpop_options.go b/authority/provisioner/dpop_options.go
index f656fb96..00d48e50 100644
--- a/authority/provisioner/dpop_options.go
+++ b/authority/provisioner/dpop_options.go
@@ -8,22 +8,12 @@ import (
 )
 
 type DPOPOptions struct {
-	// ValidationExecPath is the name of the executable to call for DPOP
-	// validation.
-	ValidationExecPath string `json:"validation-exec-path,omitempty"`
 	// Backend signing key for DPoP access token
 	SigningKey string `json:"key"`
 	// URI template acme client must call to fetch the DPoP challenge proof (an access token from wire-server)
 	DpopTarget string `json:"dpop-target"`
 }
 
-func (o *DPOPOptions) GetValidationExecPath() string {
-	if o == nil {
-		return "rusty-jwt-cli"
-	}
-	return o.ValidationExecPath
-}
-
 func (o *DPOPOptions) GetSigningKey() string {
 	if o == nil {
 		return ""