no DLP for cfg-query-rip