we have this, but it is disabled by default because it is a security vulnerability