truncate output from security enforcement