do not activate sql escaping by default