diff --git a/main.cc b/main.cc
index 0956b77135..3abb838705 100644
--- a/main.cc
+++ b/main.cc
@@ -521,7 +521,7 @@ int main(int ac, char** av) {
             } else {
                 ceo["enabled"] = "false";
             }
-            cfg->client_encryption_options(ceo);
+            cfg->client_encryption_options(std::move(ceo), cfg->client_encryption_options.source());
 
             using namespace locator;
             // Re-apply strict-dma after we've read the config file, this time