change: finishing up initial security