diff --git a/spire/templates/root.yml b/spire/templates/root.yml
index 56899f9a..5844de76 100644
--- a/spire/templates/root.yml
+++ b/spire/templates/root.yml
@@ -26,7 +26,7 @@ Parameters:
   AuthorizedKeys: { Type: AWS::SSM::Parameter::Value<List<String>>, Default: /prx/global/Spire/authorized-keys, NoEcho: true }
   NestedChangeSetScrubbingResourcesState:
     Type: String
-    Default: Disabled
+    Default: Enabled
     AllowedValues:
       - Enabled
       - Disabled