#463 reverted default to onlySecure=false due to tests needing adjustments