diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 6513544681..e8f3100b03 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -56,6 +56,9 @@
 # The only available ebuild (from GURU) has ~amd64 and no keyword for arm64 yet.
 =app-crypt/clevis-19-r1 **
 
+# We need the new --provider option.
+=app-crypt/p11-kit-0.25.5 ~amd64 ~arm64
+
 # Needed in SDK for Secure Boot.
 =app-emulation/virt-firmware-24.7 ~amd64 ~arm64