I don't see why that's necessary for the application... so how about the default is for service_role not to be given to something that's insecure?