allow direct PEM pass