diff --git a/src/ble/gatt_client.c b/src/ble/gatt_client.c
index 5f354e875..5c92a0f3f 100644
--- a/src/ble/gatt_client.c
+++ b/src/ble/gatt_client.c
@@ -1504,7 +1504,8 @@ static void gatt_client_att_packet_handler(uint8_t packet_type, uint16_t handle,
 
                 case ATT_ERROR_INSUFFICIENT_AUTHENTICATION:
                 case ATT_ERROR_INSUFFICIENT_ENCRYPTION_KEY_SIZE:
-                case ATT_ERROR_INSUFFICIENT_ENCRYPTION:
+                case ATT_ERROR_INSUFFICIENT_ENCRYPTION: {
+
                     // security too low
                     if (peripheral->security_counter > 0) {
                         gatt_client_report_error_if_pending(peripheral, packet[4]);
@@ -1590,6 +1591,7 @@ static void gatt_client_att_packet_handler(uint8_t packet_type, uint16_t handle,
                     peripheral->pending_error_code = packet[4];
                     sm_request_pairing(peripheral->con_handle);
                     break;
+                }
 #endif
 
                 // nothing we can do about that