[[registry]] location="cr.wks" insecure=true