these days I rely on auto mode. :) it's like trust-as-a-service