user restrictions, however has a bug in non-user pins