regular user can also add risks