security commit before refactoring