diff --git a/tools/secretstore.py b/tools/secretstore.py
index 4a31846..8ff5e2a 100644
--- a/tools/secretstore.py
+++ b/tools/secretstore.py
@@ -49,7 +49,10 @@
         p = os.path.join(self.proot, suffix)
         c = os.path.join(self.croot, suffix)
 
-        if not os.path.exists(p) or os.path.getctime(p) < os.path.getctime(c):
+        has_p = os.path.exists(p)
+        has_c = os.path.exists(c)
+
+        if has_c and has_p and os.path.getctime(p) < os.path.getctime(c):
             logger.info("Decrypting {} ({})...".format(suffix, c))
             decrypt(c, p)