I would argue that the local login should be on by default