do not autosign on publicly accessible masters