krankshaft: secure by default...