the embed can be opt-in to run though right? We probably shouldn't auto-run these things.