diff --git a/src/config.rs b/src/config.rs
index c4bbcaa..da23c5f 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -52,7 +52,10 @@ pub struct ServerConfig {
     /// reattaching clients land on the same shell with screen state intact. When
     /// `false`, sessions behave exactly as before: the shell is a child of the
     /// server and dies with it.
-    #[serde(default = "default_true")]
+    // Opt-in for now: this changes the core session model (per-session holder
+    // processes + fd passing), so it stays OFF by default until it has been
+    // stress-tested on a real host. Set `persist_sessions = true` to enable.
+    #[serde(default)]
     pub persist_sessions: bool,
 }
 
@@ -84,7 +87,7 @@ impl Default for ServerConfig {
             allow_remote_non_loopback_bind: false,
             allow_agent_forwarding: false,
             accept_env: default_accept_env(),
-            persist_sessions: true,
+            persist_sessions: false,
         }
     }
 }