diff --git a/.luacheckrc b/.luacheckrc
index 6d29c1534..a48c15ae5 100644
--- a/.luacheckrc
+++ b/.luacheckrc
@@ -40,7 +40,7 @@ stds.menu_common = {
 	},
 }
 
-files["builtin/client/register.lua"] = {
+files["builtin/client/init.lua"] = {
 	globals = {
 		debug = {fields={"getinfo"}},
 	}
diff --git a/builtin/client/init.lua b/builtin/client/init.lua
index ee0f267db..769fbe56c 100644
--- a/builtin/client/init.lua
+++ b/builtin/client/init.lua
@@ -13,3 +13,6 @@ dofile(commonpath .. "information_formspecs.lua")
 dofile(clientpath .. "chatcommands.lua")
 dofile(clientpath .. "misc.lua")
 assert(loadfile(commonpath .. "item_s.lua"))({}) -- Just for push/read node functions
+
+-- unset, as promised in initializeSecurityClient()
+debug.getinfo = nil
diff --git a/src/script/cpp_api/s_security.cpp b/src/script/cpp_api/s_security.cpp
index 99d68b204..36f6b045b 100644
--- a/src/script/cpp_api/s_security.cpp
+++ b/src/script/cpp_api/s_security.cpp
@@ -311,7 +311,7 @@ void ScriptApiSecurity::initializeSecurityClient()
 		"time"
 	};
 	static const char *debug_whitelist[] = {
-		"getinfo", // used by builtin and unset before mods load <- FIXME: doesn't actually happen
+		"getinfo", // used by builtin and unset before mods load
 		"traceback"
 	};