diff --git a/packages/backend-common/src/config.ts b/packages/backend-common/src/config.ts
index 399898cfc4..8e0c05b86e 100644
--- a/packages/backend-common/src/config.ts
+++ b/packages/backend-common/src/config.ts
@@ -38,7 +38,10 @@ const updateRedactionList = (
   configs: AppConfig[],
   logger: Logger,
 ) => {
-  const secretAppConfigs = schema.process(configs, { visibility: ['secret'] });
+  const secretAppConfigs = schema.process(configs, {
+    visibility: ['secret'],
+    withDeprecatedKeys: true,
+  });
   const secretConfig = ConfigReader.fromConfigs(secretAppConfigs);
   const values = new Set<string>();
   const data = secretConfig.get();
diff --git a/packages/config/src/reader.ts b/packages/config/src/reader.ts
index d85ea6f482..b4bbf0722e 100644
--- a/packages/config/src/reader.ts
+++ b/packages/config/src/reader.ts
@@ -87,7 +87,6 @@ export class ConfigReader implements Config {
         const reader = new ConfigReader(data, context, previousReader);
         reader.filteredKeys = filteredKeys;
 
-        // TODO(cmpadden) `withDeprecatedKeys` is defaulting to false on app start
         if (deprecatedKeys) {
           for (const { key, description } of deprecatedKeys) {
             // eslint-disable-next-line no-console
diff --git a/plugins/app-backend/src/lib/config.ts b/plugins/app-backend/src/lib/config.ts
index c37dc34dcc..6959253336 100644
--- a/plugins/app-backend/src/lib/config.ts
+++ b/plugins/app-backend/src/lib/config.ts
@@ -91,7 +91,7 @@ export async function readConfigs(options: ReadOptions): Promise<AppConfig[]> {
 
       const frontendConfigs = await schema.process(
         [{ data: config.get() as JsonObject, context: 'app' }],
-        { visibility: ['frontend'] },
+        { visibility: ['frontend'], withDeprecatedKeys: true },
       );
       appConfigs.push(...frontendConfigs);
     } catch (error) {