allow unverified and external for fs