not secure boxes can run files too