more secure default for yes/no button