diff --git a/agent/cache-types/connect_ca_leaf.go b/agent/cache-types/connect_ca_leaf.go
index c177804893a6..325423bec67b 100644
--- a/agent/cache-types/connect_ca_leaf.go
+++ b/agent/cache-types/connect_ca_leaf.go
@@ -50,7 +50,7 @@ const caChangeJitterWindow = 30 * time.Second
 // ConnectCALeaf supports fetching and generating Connect leaf
 // certificates.
 type ConnectCALeaf struct {
-	RegisterOptionsBlockingRefresh
+	RegisterOptionsBlockingNoRefresh
 	caIndex uint64 // Current index for CA roots
 
 	// rootWatchMu protects access to the rootWatchSubscribers map and
diff --git a/agent/cache-types/options.go b/agent/cache-types/options.go
index 6864258e8e33..22cdaccfbc99 100644
--- a/agent/cache-types/options.go
+++ b/agent/cache-types/options.go
@@ -22,6 +22,15 @@ func (r RegisterOptionsBlockingRefresh) RegisterOptions() cache.RegisterOptions
 	}
 }
 
+type RegisterOptionsBlockingNoRefresh struct{}
+
+func (r RegisterOptionsBlockingNoRefresh) RegisterOptions() cache.RegisterOptions {
+	return cache.RegisterOptions{
+		Refresh:          false,
+		SupportsBlocking: true,
+	}
+}
+
 // RegisterOptionsNoRefresh can be embedded into a struct to implement
 // part of the agent/cache.Type interface.
 // When embedded into a struct it identifies the cache type as one which