insecure profile for dev usage