Comment by cypherg

it's considered best security practice to do so