diff --git a/pkg/loop/config_test.go b/pkg/loop/config_test.go
index 555b0ae5b3..18658f259c 100644
--- a/pkg/loop/config_test.go
+++ b/pkg/loop/config_test.go
@@ -463,7 +463,7 @@ func TestManagedGRPCClientConfig(t *testing.T) {
 			},
 		}
 
-		clientConfig := ManagedGRPCClientConfig(&plugin.ClientConfig{}, brokerConfig)
+		clientConfig := ManagedGRPCClientConfig(&plugin.ClientConfig{AutoMTLS: true}, brokerConfig)
 
 		assert.NotNil(t, clientConfig.Logger)
 		assert.Equal(t, []plugin.Protocol{plugin.ProtocolGRPC}, clientConfig.AllowedProtocols)
diff --git a/pkg/loop/internal/goplugin/plugin_service.go b/pkg/loop/internal/goplugin/plugin_service.go
index cbda509351..ab50dceb91 100644
--- a/pkg/loop/internal/goplugin/plugin_service.go
+++ b/pkg/loop/internal/goplugin/plugin_service.go
@@ -134,6 +134,7 @@ func (s *PluginService[P, S]) launch() (*plugin.Client, plugin.ClientProtocol, e
 	s.lggr.Debug("Launching")
 
 	cc := s.grpcPlug.ClientConfig()
+	cc.AutoMTLS = true
 	cc.SkipHostEnv = true
 	cc.Cmd = s.cmd()
 	client := plugin.NewClient(cc)