diff --git a/changelog_unreleased/3902-disable-security-restrictions-with-command-line-switch b/changelog_unreleased/3902-disable-security-restrictions-with-command-line-switch
new file mode 100644
index 0000000000..5dd8c9489e
--- /dev/null
+++ b/changelog_unreleased/3902-disable-security-restrictions-with-command-line-switch
@@ -0,0 +1,6 @@
+[func]		tmark
+	Security restrictions may now be disabled by adding
+	command line option -X to Kea server invocations.
+	Supported by kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and
+	kea-ctrl-agent.
+	(Gitlab #3902)