diff --git a/debian/control b/debian/control
index f4b60f0..4141302 100644
--- a/debian/control
+++ b/debian/control
@@ -69,6 +69,11 @@ Description: enhances misc security settings
   * The kernel now panics on oopses to prevent it from continuing running a
  flawed process.
  .
+ Requires every module to be signed before being loaded. Any module that is
+ unsigned or signed with an invalid key cannot be loaded. This makes it harder
+ to load a malicious module.
+ /etc/default/grub.d/40_only_allow_signed_modules.cfg
+ .
  Uncommon network protocols are blacklisted:
  These are rarely used and may have unknown vulnerabilities.
  /etc/modprobe.d/uncommon-network-protocols.conf