don't allow test-receipt by default

See bugs 861010 and part of 858610.