it's only very lightly tested but it seems to work. the _stream may be quite wrong, or perhaps that's a local admin decision anyway
