finally removed the security constraint with message passing