I prefer to pass explicit security modes... rather than enabling everything from the start.