media auto-embedding, disabled for now due to security concerns