security - use include_wrappers instead of patching