allowed outside config + some fallbacks