diff --git a/lib/hcrypto/test_rsa.c b/lib/hcrypto/test_rsa.c
index 49a78ccf3..1d6268737 100644
--- a/lib/hcrypto/test_rsa.c
+++ b/lib/hcrypto/test_rsa.c
@@ -157,6 +157,7 @@ read_key(ENGINE *engine, const char *rsa_key)
     f = fopen(rsa_key, "r");
     if (f == NULL)
 	err(1, "could not open file %s", rsa_key);
+    rk_cloexec_file(f);
     
     size = fread(buf, 1, sizeof(buf), f);
     fclose(f);