diff --git a/src/libnm-core-impl/nm-setting-wireless-security.c b/src/libnm-core-impl/nm-setting-wireless-security.c
index f085f2c33a..74881b5888 100644
--- a/src/libnm-core-impl/nm-setting-wireless-security.c
+++ b/src/libnm-core-impl/nm-setting-wireless-security.c
@@ -866,8 +866,9 @@ need_secrets(NMSetting *setting)
         goto no_secrets;
     }
 
-    g_assert_not_reached();
-    return secrets;
+    /* If we get here, we're an older libnm talking to a newer NetworkManager
+     * service (perhaps from a container or during an upgrade). Assume that
+     * unknown/future key management modes don't need any extra secrets. */
 
 no_secrets:
     if (secrets)