global RPC too dangerous, lock it down