no local variables (vague security concerns)