clarify language around backdoors and providers