diff --git a/scripts/policy/protocols/conn/known-hosts.zeek b/scripts/policy/protocols/conn/known-hosts.zeek
index 4bd123abdd..822bd26ad5 100644
--- a/scripts/policy/protocols/conn/known-hosts.zeek
+++ b/scripts/policy/protocols/conn/known-hosts.zeek
@@ -28,7 +28,7 @@ export {
 	## When true, use a Broker data store, else use a regular Zeek set
 	## with keys uniformly distributed over proxy nodes in cluster
 	## operation.
-	const use_host_store = T &redef;
+	const use_host_store = F &redef;
 
 	## The hosts whose existence should be logged and tracked.
 	## See :zeek:type:`Host` for possible choices.
diff --git a/scripts/policy/protocols/conn/known-services.zeek b/scripts/policy/protocols/conn/known-services.zeek
index c8017911bd..3c323525fd 100644
--- a/scripts/policy/protocols/conn/known-services.zeek
+++ b/scripts/policy/protocols/conn/known-services.zeek
@@ -37,7 +37,7 @@ export {
 	## When true, use a Broker data store, else use a regular Zeek set
 	## with keys uniformly distributed over proxy nodes in cluster
 	## operation.
-	const use_service_store = T &redef;
+	const use_service_store = F &redef;
 
 	## Require UDP server to respond before considering it an "active service".
 	option service_udp_requires_response = T;
diff --git a/scripts/policy/protocols/ssl/known-certs.zeek b/scripts/policy/protocols/ssl/known-certs.zeek
index cd4fa23ccd..a5dd1d2382 100644
--- a/scripts/policy/protocols/ssl/known-certs.zeek
+++ b/scripts/policy/protocols/ssl/known-certs.zeek
@@ -37,7 +37,7 @@ export {
 	## When true, use a Broker data store, else use a regular Zeek set
 	## with keys uniformly distributed over proxy nodes in cluster
 	## operation.
-	const use_cert_store = T &redef;
+	const use_cert_store = F &redef;
 
 	type AddrCertHashPair: record {
 		host: addr;
diff --git a/testing/external/commit-hash.zeek-testing-private b/testing/external/commit-hash.zeek-testing-private
index 496448b15b..c87cbed312 100644
--- a/testing/external/commit-hash.zeek-testing-private
+++ b/testing/external/commit-hash.zeek-testing-private
@@ -1 +1 @@
-41f6eb60c626316f0554548fcfa1ab07ddcf61a0
+db9ce1c0c2aa9df87126061763f0e4faf749a8cb
\ No newline at end of file