add hook for checking we're not a CSO
manually merge