diff --git a/.gitignore b/.gitignore
index 5833226..603f304 100644
--- a/.gitignore
+++ b/.gitignore
@@ -83,3 +83,4 @@
 /container-selinux-5c98b56.tar.gz
 /container-selinux-2521d0d.tar.gz
 /container-selinux-619db17.tar.gz
+/container-selinux-acc6941.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 3b292fe..26ec77b 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
-%global commit0 619db17b743ec8c75dabb0b08563f9ddad899ff2
+%global commit0 acc6941b2b35d7e44718bb986492d808906d9d8c
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -26,7 +26,7 @@ Name: container-selinux
 %if 0%{?fedora}
 Epoch: 2
 %endif
-Version: 2.90
+Version: 2.91
 Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -109,6 +109,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Tue Mar 26 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.91-1
+- Allow container runtimes to create unlabeled keyrings
+
 * Wed Mar 20 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.90-1
 - Allow containers to mount and umount fuse file systems.  This will allow us
 - to use buidlah within a user namespace separated container.
diff --git a/sources b/sources
index fca6816..05d5018 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-619db17.tar.gz) = 958e7672a8a173b7b5d28c4a504d6c733292dfed7a850d81f8243c406eef497232dbaa7f6c6520054ef02e2d14a3a66b6e75035fa8177e145e94497f71ccaa40
+SHA512 (container-selinux-acc6941.tar.gz) = 0086f8187095444deb8ed1b6b8396266aaf8f4f0f9d46b3bb82d89ba0208b174955fdf72e7c622e5f4d6f63ad6750318823f50f29ad73f72907b4da9b45ce39b