I would add "by default". We have option in settings.php to adjust this requirement.