Meaning confirmed RTPs, built-from inside the user security systems, and no debateable operators flexing the guidelines