unsecured and debuggable by default