diff --git a/metropolis/proto/private/BUILD.bazel b/metropolis/proto/private/BUILD.bazel
index 57b7ba4..1729ce9 100644
--- a/metropolis/proto/private/BUILD.bazel
+++ b/metropolis/proto/private/BUILD.bazel
@@ -6,6 +6,7 @@
     name = "private_proto",
     srcs = ["private.proto"],
     visibility = ["//metropolis:__subpackages__"],
+    deps = ["//metropolis/proto/common:common_proto"],
 )
 
 go_proto_library(
@@ -13,6 +14,7 @@
     importpath = "source.monogon.dev/metropolis/proto/private",
     proto = ":private_proto",
     visibility = ["//metropolis:__subpackages__"],
+    deps = ["//metropolis/proto/common"],
 )
 
 go_library(
diff --git a/metropolis/proto/private/private.proto b/metropolis/proto/private/private.proto
index c682311..4cdbef2 100644
--- a/metropolis/proto/private/private.proto
+++ b/metropolis/proto/private/private.proto
@@ -18,6 +18,8 @@
 option go_package = "source.monogon.dev/metropolis/proto/private";
 package metropolis.proto.private;
 
+import "metropolis/proto/common/common.proto";
+
 // Node describes a single node's state in etcd
 // DEPRECATED: this will be moved to //metropolis/node/curator.
 message Node {
@@ -73,4 +75,9 @@
     // cluster_ca is the X509 CA certificate of the cluster set during
     // registration and used by nodes joining the cluster.
     bytes cluster_ca = 3;
+    // storage_security is the node storage security that this node has been
+    // created with, and is used to determine the way the local storage (ie.
+    // Metropolis data partition) will be attempted to be mounted on subsequent
+    // node startups.
+    metropolis.proto.common.NodeStorageSecurity storage_security = 4;
 }