Manifest security

See issue #28