should be safe for now in terms of authentication