diff --git a/kernel.sh b/kernel.sh
index ac6b098..1e80064 100644
--- a/kernel.sh
+++ b/kernel.sh
@@ -435,7 +435,7 @@ doDefaultMitigations() {
         doScriptsConfigFile disable $OPTIONS/unsecured.txt
     else
         doEchoStep "Options: secured ON"
-        doScriptsConfigFile disable $OPTIONS/secured.txt
+        doScriptsConfigFile enable $OPTIONS/secured.txt
     fi
 
     cp .config .config.mitigations.after