diff --git a/src/agent/src/cdh.rs b/src/agent/src/cdh.rs
index 46ca3c64f6..d34ad20388 100644
--- a/src/agent/src/cdh.rs
+++ b/src/agent/src/cdh.rs
@@ -74,6 +74,7 @@ impl CDHClient {
         Ok(unsealed_secret.plaintext)
     }
 
+    #[cfg(feature = "guest-pull")]
     pub async fn secure_mount(
         &self,
         volume_type: &str,