static security hash is possible