diff --git a/crypto/openssh/sk_config.h b/crypto/openssh/sk_config.h
new file mode 100644
--- /dev/null
+++ b/crypto/openssh/sk_config.h
@@ -0,0 +1 @@
+#define ENABLE_SK_INTERNAL /**/
diff --git a/secure/ssh.mk b/secure/ssh.mk
--- a/secure/ssh.mk
+++ b/secure/ssh.mk
@@ -8,5 +8,6 @@
 SRCS+=	 ssh_namespace.h
 
 .if ${MK_USB} != "no"
-CFLAGS+=	-DENABLE_SK_INTERNAL=1
+# Built-in security key support
+CFLAGS+= -include sk_config.h
 .endif