more secure default options