diff --git a/kernel.spec b/kernel.spec
index 9418732..7e5df93 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -24,7 +24,7 @@
 %define sublevel	80
 
 # Release number. Increase this before a rebuild.
-%define rpmrel		2
+%define rpmrel		3
 %define fullrpmrel	%{rpmrel}
 
 %define rpmtag		%{disttag}
@@ -76,23 +76,23 @@
 %endif
 
 # "Nickel" is a special brand for certified distros
-# gost_sign will probably be enabled outside of Nickel later,
-# but for now let's better do not make such experiments in stable platforms
 %if %{mdvver} == 201900 || %{mdvver} == 201905
 %bcond_without nickel
-%bcond_without gost_sign
+# Require kernel modules to be signed
 %bcond_without oblig_signed_modules
 %else
 %bcond_with nickel
-%bcond_with gost_sign
 %bcond_with oblig_signed_modules
 %endif
 
-# Build binary out-of-tree kernel modules (experimental)
 %if %{mdvver} >= 201905
+# Build binary out-of-tree kernel modules (experimental)
 %bcond_without binary_extra_modules
+# Sign kernel modules with GOST key (experimental)
+%bcond_without gost_sign
 %else
 %bcond_with binary_extra_modules
+%bcond_with gost_sign
 %endif
 
 %bcond_with ccache