disable private meddleware by default