Enabled on _foundation reset prior to _oem read. If disable-safeword is found in _oem, then disabled.