support an insecure mode for development purposes