diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth
index 9342dd1ccf..747efc1fbd 100644
--- a/factory/etc/pam.d/system-auth
+++ b/factory/etc/pam.d/system-auth
@@ -13,6 +13,7 @@ account  required   pam_permit.so
 password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
 password required   pam_deny.so
 
+-session optional   pam_keyinit.so revoke
 -session optional   pam_loginuid.so
 -session optional   pam_systemd.so
 session  sufficient pam_unix.so