avoid some NO_<cipher> problems