added a force-secure setting