diff --git a/cmd/derper/derper.go b/cmd/derper/derper.go
index f1d848a5f..f08be7d08 100644
--- a/cmd/derper/derper.go
+++ b/cmd/derper/derper.go
@@ -224,6 +224,7 @@ func main() {
 		}
 		meshKey = st.Secret(meshKeySecret).GetString()
 		log.Println("Got mesh key from setec store")
+		st.Close()
 	} else if *meshPSKFile != "" {
 		b, err := setec.StaticFile(*meshPSKFile)
 		if err != nil {