it is supposed to fail safe