new environment variable ALLOW_UNSAFE