only main interface has executing permission