adding hide api, security really needs to be fixed on this issue