starting to implement security domain model