firmware: default is entry_always, kill warning