some hard coded security