enforce-first-as disable