diff --git a/start b/start
index 9f88c7c..ce9b863 100755
--- a/start
+++ b/start
@@ -9,10 +9,16 @@ set -xeuo pipefail
 
 ./1_create_test_app_namespace.sh
 
+# This script is run for both follower-based and master-based installs
+# since database initial password yaml templates are also generated in
+# them as well. The scripts cannot be separated since master needs that
+# generated password for policy loading and followers need it to even just
+# start.
+./2_load_conjur_policies.sh
+
+# Only automatically run these script for dev/demo envs deploying a master
+# cluster directly to k8s/oc
 if [[ "${DEPLOY_MASTER_CLUSTER}" = "true" ]]; then
-  # Only automatically run these scripts for dev/demo envs deploying a master
-  # cluster directly to k8s/oc
-  ./2_load_conjur_policies.sh
   ./3_init_conjur_cert_authority.sh
 fi