diff --git a/src/afs/afs_conn.c b/src/afs/afs_conn.c
index 16bc447e7e..0e984f0c77 100644
--- a/src/afs/afs_conn.c
+++ b/src/afs/afs_conn.c
@@ -220,15 +220,15 @@ struct conn *afs_ConnBySA(struct srvAddr *sap, unsigned short aport,
 
 	      if (cryptall) {
 		level=rxkad_crypt;
-		isec=3;
-	      }
-	      else {
+	      } else {
 		level=rxkad_clear;
-		isec=2;
 	      }
-		/* kerberos tickets on channel 2 */
-		csec = rxkad_NewClientSecurityObject(level, tu->ct.HandShakeKey,
-			/* kvno */ tu->ct.AuthHandle, tu->stLen, tu->stp);
+	      isec=2;
+	      /* kerberos tickets on channel 2 */
+	      csec = rxkad_NewClientSecurityObject(level, tu->ct.HandShakeKey,
+						   /* kvno */ 
+						   tu->ct.AuthHandle, 
+						   tu->stLen, tu->stp);
 	}
 	if (isec == 0)
 	    csec = rxnull_NewClientSecurityObject();