security very relaxed for initial joining phase