Set fail-open explicitly as default.