Distrust by default