don't be unsafe by default