diff --git a/config/debian-security/cron.unchecked b/config/debian-security/cron.unchecked
index 72e5c4fd349cdb5b14a93361c0af13426778b0aa..a5af71eb27065258971a9bcfdc53f78e7706bb94 100755
--- a/config/debian-security/cron.unchecked
+++ b/config/debian-security/cron.unchecked
@@ -36,6 +36,7 @@ old_last_changed=$(last_changed security)
 old_last_changed_build=$(last_changed build-queues)
 
 cd $unchecked
+rsync -rtq --safe-links --chmod=F640,D755 --remove-source-files rsync-from-security-upload-master:/does/not/matter . || true
 changes=$(find . -maxdepth 1 -mindepth 1 -type f -name \*.changes | sed -e "s,./,," | xargs)
 if [ -n "$changes" ]; then
     doanything=true
diff --git a/config/homedir/ssh/security-config b/config/homedir/ssh/security-config
index 2dc0ab3b9fe4c8ea5983ed1d464b9cf6c2ab9cfe..2a1fb73991d2dc2cc22378abebf11af254a4788c 100644
--- a/config/homedir/ssh/security-config
+++ b/config/homedir/ssh/security-config
@@ -19,3 +19,11 @@ Host morgue-sync
   Hostname stabile.debian.org
   User dak
   IdentityFile /srv/security-master.debian.org/s3kr1t/push_morgue
+
+Host rsync-from-security-upload-master
+  Hostname suchon.debian.org
+  User dak
+  IdentityFile /srv/security-master.debian.org/s3kr1t/rsync-from-security-upload-master
+  ControlMaster auto
+  ControlPath ~/.ssh/socket-%n
+  ControlPersist yes