diff --git a/lib/hx509/test_query.in b/lib/hx509/test_query.in
index d37b12821..5b238a123 100644
--- a/lib/hx509/test_query.in
+++ b/lib/hx509/test_query.in
@@ -38,36 +38,43 @@ srcdir="@srcdir@"
 
 echo "try printing"
 ./hxtool print \
+	--pass=PASS:foobar \
 	PKCS12:$srcdir/data/test.p12 || exit 1
 
 echo "make sure entry is found (friendlyname)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=friendlyname-test  \
 	PKCS12:$srcdir/data/test.p12 || exit 1
 
 echo "make sure entry is not found  (friendlyname)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=friendlyname-test-not  \
 	PKCS12:$srcdir/data/test.p12 && exit 1
 
 echo "check for ca cert (friendlyname)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=ca  \
 	PKCS12:$srcdir/data/test.p12 || exit 1
 
 echo "make sure entry is not found (friendlyname)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=friendlyname-test \
 	PKCS12:$srcdir/data/sub-cert.p12 && exit 1
 
 echo "make sure entry is found (friendlyname|private key)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=friendlyname-test  \
 	--private-key \
 	PKCS12:$srcdir/data/test.p12 || exit 1
 
 echo "make sure entry is not found (friendlyname|private key)"
 ./hxtool query \
+	--pass=PASS:foobar \
 	--friendlyname=ca  \
 	--private-key \
 	PKCS12:$srcdir/data/test.p12 && exit 1