The default case was actually catastrophically bad for any actual deployment
since it would just lock everyone out of all the systems.