fix ensure in upstream + pkifile