diff --git a/shared/concepts/codeql/concepts/ConceptsShared.qll b/shared/concepts/codeql/concepts/ConceptsShared.qll
index 2a400fa0713..fe3722eb3dd 100644
--- a/shared/concepts/codeql/concepts/ConceptsShared.qll
+++ b/shared/concepts/codeql/concepts/ConceptsShared.qll
@@ -9,6 +9,8 @@
  * each language, but we will maintain a discipline of moving those concepts to
  * `ConceptsShared.qll` ASAP.
  */
+overlay[local?]
+module;
 
 private import CryptoAlgorithms as CA
 private import codeql.dataflow.DataFlow as DF
diff --git a/shared/concepts/codeql/concepts/CryptoAlgorithms.qll b/shared/concepts/codeql/concepts/CryptoAlgorithms.qll
index 01b568d234a..23a45027cf1 100644
--- a/shared/concepts/codeql/concepts/CryptoAlgorithms.qll
+++ b/shared/concepts/codeql/concepts/CryptoAlgorithms.qll
@@ -3,6 +3,8 @@
  *
  * The classification into strong and weak are based on Wikipedia, OWASP and Google (2021).
  */
+overlay[local?]
+module;
 
 private import codeql.concepts.internal.CryptoAlgorithmNames
 
diff --git a/shared/concepts/codeql/concepts/internal/CryptoAlgorithmNames.qll b/shared/concepts/codeql/concepts/internal/CryptoAlgorithmNames.qll
index 8bb63d97876..efcd870c724 100644
--- a/shared/concepts/codeql/concepts/internal/CryptoAlgorithmNames.qll
+++ b/shared/concepts/codeql/concepts/internal/CryptoAlgorithmNames.qll
@@ -7,6 +7,8 @@
  *
  * The classification into strong and weak are based on Wikipedia, OWASP and Google (2021).
  */
+overlay[local?]
+module;
 
 /**
  * Holds if `name` corresponds to a strong hashing algorithm.
diff --git a/shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll b/shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll
index ede88ebf814..c50d1341c77 100644
--- a/shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll
+++ b/shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll
@@ -6,6 +6,8 @@
  *
  * 'Sensitive' data in general is anything that should not be sent around in unencrypted form.
  */
+overlay[local?]
+module;
 
 /**
  * A classification of different kinds of sensitive data: