secure user control