client is home-insecure