found it - but I'll do some more testing before undoing the bypass