disable save extract unless authorized