diff --git a/lib/tbot/services/identity/key_agent_service.go b/lib/tbot/services/identity/key_agent_service.go
index 3a3d2a46061..c871c263265 100644
--- a/lib/tbot/services/identity/key_agent_service.go
+++ b/lib/tbot/services/identity/key_agent_service.go
@@ -152,6 +152,7 @@ func (s *KeyAgentService) Run(ctx context.Context) error {
 	// 	   and permissions to restrict access to it - this is the same as the
 	// 	   internal.CreateListener method's behavior.
 	if dir.ACLsEnabled() {
+		//nolint:staticcheck // staticcheck doesn't like nop implementations in fs_other.go
 		if err := botfs.ConfigureACL(filepath.Join(dir.Path, libhwk.CertFileName), dir.Readers); err != nil {
 			return trace.Wrap(err)
 		}