don't load rack-protection unless necessary