diff --git a/sync/v1.proto b/sync/v1.proto
index a24ebed..9bed65d 100644
--- a/sync/v1.proto
+++ b/sync/v1.proto
@@ -378,6 +378,7 @@ message PreflightResponse {
   reserved 39;
   reserved 40;
   reserved 41 to 42;
+  reserved 43;
 
   // These fields are deprecated forms of other fields and exist here solely for
   // backwards compatibility.
@@ -418,7 +419,7 @@ message PreflightResponse {
     deprecated = true
   ];
 
-  // next ID: 43
+  // next ID: 44
 }
 
 // The Decision enum records what decision Santa made about an execution.
diff --git a/syncv2/v2.proto b/syncv2/v2.proto
index bd3c10e..95dfe00 100644
--- a/syncv2/v2.proto
+++ b/syncv2/v2.proto
@@ -591,6 +591,10 @@ message PreflightResponse {
   // configuration profile message or default applies.
   optional string remount_removable_media_block_message = 42;
 
+  // If true, Santa skips re-hashing an executable whose code signature the
+  // kernel does not enforce before reusing a cached allow for it.
+  optional bool disable_executable_integrity_recheck = 43;
+
   // These fields are deprecated forms of other fields and exist here solely for
   // backwards compatibility.
   optional bool deprecated_enabled_transitive_whitelisting = 1000 [
@@ -635,7 +639,7 @@ message PreflightResponse {
   reserved 17;
   reserved 38;
 
-  // next ID: 43
+  // next ID: 44
 }
 
 // The Decision enum records what decision Santa made about an execution.