diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 936cf5c08..b47b1992f 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -308,7 +308,7 @@ get_pa_etype_info(METHOD_DATA *md, hdb_entry *client)
     return 0;
 }
 
-int
+static int
 check_flags(hdb_entry *client, const char *client_name,
 	    hdb_entry *server, const char *server_name,
 	    krb5_boolean is_as_req)