diff --git a/prebuilts/init/init.aospa-hub.rc b/prebuilts/init/init.aospa-hub.rc
index 5ac81ac7..a4a5d0d3 100644
--- a/prebuilts/init/init.aospa-hub.rc
+++ b/prebuilts/init/init.aospa-hub.rc
@@ -1,4 +1,4 @@
 on post-fs-data
     # Create an additional OTA package directory that unlike
     # /data/ota_package will not be touched by GmsCore.
-    mkdir /data/hub_updates 0770 system cache
+    mkdir /data/hub_updates 0770 system cache encryption=Require