salt not needed with security service