make sure arg is user controlled
test that this requires user input