diff --git a/private/system_app.te b/private/system_app.te
index 8fafce0..56b9746 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -164,6 +164,9 @@
 # Settings app reads ro.oem_unlock_supported
 get_prop(system_app, oem_unlock_prop)
 
+# TODO Remove this property when Keystore 2.0 migration is complete b/171563717
+get_prop(system_app, keystore2_enable_prop)
+
 ###
 ### Neverallow rules
 ###