s4-drs: security checking on DRS needs to default to on