it seems to me maybe this should depend on securelevel. perhaps only securelevel > 1, so that it still works for a default install but someone who really care about securelevel (and thus sets it to > 1) will not have this option suddenly enabled on them... .mrg.