fix security caution for 'remote' setting (was 'xmlrpc')