externalized security-methods into actor