diff --git a/config/filter.d/named-refused.conf b/config/filter.d/named-refused.conf
index 0d5a6275..51505288 100644
--- a/config/filter.d/named-refused.conf
+++ b/config/filter.d/named-refused.conf
@@ -22,7 +22,7 @@
 [Definition]
 
 # Daemon name
-_daemon=named
+_daemon=named(-pkcs11)?
 
 # Shortcuts for easier comprehension of the failregex