added masquerade_bypass_warden_callback option