improve security on update