diff --git a/debian/control b/debian/control
index c19f08a..ccdc21c 100644
--- a/debian/control
+++ b/debian/control
@@ -102,6 +102,9 @@ Description: enhances misc security settings
  .
   * Load jitterentropy_rng kernel module.
   /usr/lib/modules-load.d/30_security-misc.conf
+ .
+  * Distrusts the CPU for initial entropy at boot as it is
+  not possible to audit and may be backdoored. /etc/default/grub.d/40_distrust_cpu.cfg
  .
  Uncommon network protocols are blacklisted:
  These are rarely used and may have unknown vulnerabilities.