add hook for checking we're not a CSO