check bins in manifest for security