diff --git a/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go b/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go
index b3c8699a..63ed983b 100644
--- a/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go
+++ b/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go
@@ -5,4 +5,13 @@ package main
 
 import (
 	_ "crypto/tls/fipsonly" // restricts all TLS configuration to FIPS-approved settings.
+	"log"
+	"time"
 )
+
+func init() {
+	go func() {
+		time.Sleep(5 * time.Second)
+		log.Println("using boringcrypto in fipsonly mode")
+	}()
+}
diff --git a/internal/crypto/ptls/fips_strict.go b/internal/crypto/ptls/fips_strict.go
index ad0948ea..a8592c56 100644
--- a/internal/crypto/ptls/fips_strict.go
+++ b/internal/crypto/ptls/fips_strict.go
@@ -5,9 +5,13 @@ package ptls
 
 import (
 	_ "crypto/tls/fipsonly" // restricts all TLS configuration to FIPS-approved settings.
-	"fmt"
+	"log"
+	"time"
 )
 
-func main() {
-	fmt.Println("using fips only mode.")
+func init() {
+	go func() {
+		time.Sleep(5 * time.Second)
+		log.Println("using boringcrypto in fips only mode.")
+	}()
 }