protect forgery disabled, skip authenticity before filter