disable key check, rely on whitelist for testing