introduce new class.secure to allow modules register own files