alg = 'none' is a possibility