allow no value for security check