diff --git a/.golangci.yml b/.golangci.yml
index 3c2d6b3..e314a4c 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -7,5 +7,10 @@ linters:
     - funlen
     - whitespace
     - wsl
-    - godox
 
+linters-settings:
+  godox:
+    # report any comments starting with keywords, this is useful for TODO or FIXME comments that
+    # might be left in the code accidentally and should be resolved before merging
+    keywords:
+      - FIXME
diff --git a/session.go b/session.go
index 7a358a4..5006029 100644
--- a/session.go
+++ b/session.go
@@ -314,8 +314,7 @@ func newSession(e *Envelope) (*Session, error) { //nolint:gocognit,gocyclo
 	err := e.LoopSecrets(SignetSchemeKey, func(signet *Signet) error {
 		totalSignetsSeen++
 		keySourceAvailable = true
-		// FIXME
-		return nil
+		return s.calcAndCheckSecurityLevel(nil, signet)
 	})
 	if err != nil {
 		return nil, err