diff --git a/roles/mail/templates/spamassassin/local.cf b/roles/mail/templates/spamassassin/local.cf
index e0254a64af7fc87ec24b30c388a23b9e609794cf..b789cc9ac41a44779bc96c0dfaa536870700373e 100644
--- a/roles/mail/templates/spamassassin/local.cf
+++ b/roles/mail/templates/spamassassin/local.cf
@@ -44,10 +44,10 @@ bayes_learn_to_journal 1
 bayes_min_ham_num 20
 bayes_min_spam_num 20
 bayes_use_hapaxes 1
-bayes_auto_learn 1 
+bayes_auto_learn 1
 bayes_auto_learn_on_error 1
-bayes_auto_learn_threshold_nonspam 0 
-bayes_auto_learn_threshold_spam 5.00 
+bayes_auto_learn_threshold_nonspam 0
+bayes_auto_learn_threshold_spam 5.00
 bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
 bayes_sql_dsn DBI:mysql:ai_spam:127.0.0.1:3308
 bayes_sql_username spamassassin
@@ -66,7 +66,7 @@ dns_options rotate
 dns_test_interval 60
 
 #   Some shortcircuiting, if the plugin is enabled
-# 
+#
 ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
 #
 #   default: strongly-whitelisted mails are *really* whitelisted now, if the
@@ -127,6 +127,8 @@ score DKIM_ADSP_CUSTOM_HIGH	8
 
 score T_DKIM_INVALID 3
 
+score ENCRYPTED_MESSAGE -2
+
 # Score SPF failures.
 score SPF_NONE          1.0
 score SPF_FAIL		3.0