diff --git a/release/Makefile b/release/Makefile
index 49c6f312b1b6..d07116eaf6c7 100644
--- a/release/Makefile
+++ b/release/Makefile
@@ -228,8 +228,7 @@ ZIPNSPLIT=		gzip --no-name -9 -c | split -b 1423k -
 
 # Things that need to be compiled without crypto support in releases
 .if !defined(FIXCRYPTO) && !make(release) && !make(rerelease)
-FIXCRYPTO!=	cd ${.CURDIR}/../kerberos5; ${MAKE} -V KPROGS; \
-		cd ${.CURDIR}/../secure; ${MAKE} -V SPROGS
+FIXCRYPTO!=	cd ${.CURDIR}/../secure; ${MAKE} -V SPROGS
 .endif
 
 # Things which may get you into trouble if you change them
diff --git a/secure/Makefile b/secure/Makefile
index 2ee6067cf6c8..68ce6561d8b1 100644
--- a/secure/Makefile
+++ b/secure/Makefile
@@ -5,6 +5,7 @@ SUBDIR= lib libexec usr.bin usr.sbin
 # These are programs which depend on crypto, but not Kerberos.
 SPROGS=	bin/ed usr.sbin/ppp usr.sbin/pppd usr.sbin/tcpdump/tcpdump \
 	lib/libfetch usr.bin/fetch usr.sbin/pkg_install \
+	lib/libpam \
 	lib/libtelnet libexec/telnetd usr.bin/telnet
 .if !defined(NO_SENDMAIL)
 SPROGS+=usr.sbin/sendmail