diff --git a/pkg/daemons/control/server.go b/pkg/daemons/control/server.go
index 8509383e5a..08ae36999d 100644
--- a/pkg/daemons/control/server.go
+++ b/pkg/daemons/control/server.go
@@ -156,6 +156,8 @@ func apiServer(ctx context.Context, cfg *config.Control, runtime *config.Control
 	certDir := filepath.Join(cfg.DataDir, "tls/temporary-certs")
 	os.MkdirAll(certDir, 0700)
 
+	// TODO: sqlite doesn't need the watch cache, but etcd does, so make this dynamic
+	args = append(args, "--watch-cache=false")
 	args = append(args, "--cert-dir", certDir)
 	args = append(args, "--allow-privileged=true")
 	args = append(args, "--authorization-mode", strings.Join([]string{modes.ModeNode, modes.ModeRBAC}, ","))