diff --git a/include/rocksdb/env_encrypt2.h b/include/rocksdb/env_encrypt2.h
index 68b8199a5..22d0279ff 100644
--- a/include/rocksdb/env_encrypt2.h
+++ b/include/rocksdb/env_encrypt2.h
@@ -245,6 +245,8 @@ class EncryptedEnvV2 : public EnvWrapper {
 
   EncryptedEnvV2(Env* base_env, ReadKeys encrypt_read, WriteKey encrypt_write);
 
+  void SetKeys(ReadKeys encrypt_read, WriteKey encrypt_write);
+
   bool IsWriteEncrypted() const;
 
   // NewSequentialFile opens a file for sequential reading.
@@ -314,10 +316,6 @@ class EncryptedEnvV2 : public EnvWrapper {
  protected:
   void init();
 
-  // following is not thread safe, intended for constuction
-  //  and unit test only
-  void SetKeys(ReadKeys encrypt_read, WriteKey encrypt_write);
-
   template <class TypeFile>
   Status ReadSeqEncryptionPrefix(
       TypeFile* f, std::shared_ptr<const CTREncryptionProviderV2>& provider,