diff --git a/management/cmd/management.go b/management/cmd/management.go
index d740423d7..d95407686 100644
--- a/management/cmd/management.go
+++ b/management/cmd/management.go
@@ -80,7 +80,7 @@ var (
 			if err != nil {
 				return fmt.Errorf("failed reading provided config file: %s: %v", mgmtConfig, err)
 			}
-			config.HttpConfig.KeyRotationEnabled = UseKeyCacheHeaders
+			config.HttpConfig.KeyRotationEnabled = useKeyCacheHeaders
 
 			tlsEnabled := false
 			if mgmtLetsencryptDomain != "" || (config.HttpConfig.CertFile != "" && config.HttpConfig.CertKey != "") {
diff --git a/management/cmd/root.go b/management/cmd/root.go
index ae44f373a..399eb9b10 100644
--- a/management/cmd/root.go
+++ b/management/cmd/root.go
@@ -23,7 +23,7 @@ var (
 	logFile              string
 	disableMetrics       bool
 	disableSingleAccMode bool
-	UseKeyCacheHeaders   bool
+	useKeyCacheHeaders   bool
 
 	rootCmd = &cobra.Command{
 		Use:          "netbird-mgmt",
@@ -55,7 +55,7 @@ func init() {
 	mgmtCmd.Flags().StringVar(&certKey, "cert-key", "", "Location of your SSL certificate private key. Can be used when you have an existing certificate and don't want a new certificate be generated automatically. If letsencrypt-domain is specified this property has no effect")
 	mgmtCmd.Flags().BoolVar(&disableMetrics, "disable-anonymous-metrics", false, "disables push of anonymous usage metrics to NetBird")
 	mgmtCmd.Flags().StringVar(&dnsDomain, "dns-domain", defaultSingleAccModeDomain, fmt.Sprintf("Domain used for peer resolution. This is appended to the peer's name, e.g. pi-server. %s. Max lenght is 192 characters to allow appending to a peer name with up to 63 characters.", defaultSingleAccModeDomain))
-	mgmtCmd.Flags().BoolVar(&UseKeyCacheHeaders, "use-key-cache-headers", false, "Enable cache headers evaluation to determine signing key rotation period. This will refresh the signing key upon expiry.")
+	mgmtCmd.Flags().BoolVar(&useKeyCacheHeaders, "use-key-cache-headers", false, "Enable cache headers evaluation to determine signing key rotation period. This will refresh the signing key upon expiry.")
 	rootCmd.MarkFlagRequired("config") //nolint
 
 	rootCmd.PersistentFlags().StringVar(&logLevel, "log-level", "info", "")