update to not allow scripts to execute by default