let's bump up the security around the new method