diff --git a/src/cmd-buildextend-metal b/src/cmd-buildextend-metal
index c7ec9d8795..1f44bca205 100755
--- a/src/cmd-buildextend-metal
+++ b/src/cmd-buildextend-metal
@@ -21,6 +21,11 @@ case "$(basename "$0")" in
         image_type=qemu
         image_suffix=-secex
         ;;
+    "cmd-buildextend-qemu-secex")
+        secure_execution=1
+        image_type=qemu
+        image_suffix=-secex
+        ;;
     *) fatal "called as unexpected name $0";;
 esac
 
diff --git a/src/cmd-buildextend-qemu-secex b/src/cmd-buildextend-qemu-secex
new file mode 120000
index 0000000000..c2fa2326d8
--- /dev/null
+++ b/src/cmd-buildextend-qemu-secex
@@ -0,0 +1 @@
+./cmd-buildextend-metal
\ No newline at end of file