allow fortify mode by hand also (helps with groups), default security to private