diff --git a/debian/security-misc.maintscript b/debian/security-misc.maintscript
index 78a36fd..c5c2569 100644
--- a/debian/security-misc.maintscript
+++ b/debian/security-misc.maintscript
@@ -68,15 +68,15 @@ rm_conffile /etc/permission-hardening.d/25_default_whitelist_virtualbox.conf
 rm_conffile /etc/permission-hardening.d/30_default.conf
 
 ## merged into 1 file /etc/default/grub.d/40_kernel_hardening.cfg
-rm /etc/default/grub.d/40_distrust_bootloader.cfg
-rm /etc/default/grub.d/40_distrust_cpu.cfg
-rm /etc/default/grub.d/40_enable_iommu.cfg
+rm_conffile /etc/default/grub.d/40_distrust_bootloader.cfg
+rm_conffile /etc/default/grub.d/40_distrust_cpu.cfg
+rm_conffile /etc/default/grub.d/40_enable_iommu.cfg
 
 ## renamed to /etc/default/grub.d/40_remount_secure.cfg
-rm /etc/default/grub.d/40_remmount-secure.cfg
+rm_conffile /etc/default/grub.d/40_remmount-secure.cfg
 
 ## renamed to /etc/default/grub.d/40_signed_modules.cfg
-rm /etc/default/grub.d/40_only_allow_signed_modules.cfg
+rm_conffile /etc/default/grub.d/40_only_allow_signed_modules.cfg
 
 ## renamed to /etc/default/grub.d/41_quiet_boot.cfg
-rm /etc/default/grub.d/41_quiet.cfg
+rm_conffile /etc/default/grub.d/41_quiet.cfg