security work - expressions