don't use mask input, and fail well if someone tries