security options for unknownUsers, fixes