don't auto-configure - security risk