set safe to server by default to enable includes