Secure bundle
Should not convert charset to upcase, closes #2