what? PossiblyHarmful msg should be allowed when UntrustedMode == false