base should be safe for non-ec2 now