do not use server-prepared statements since some observed issues