first pass  on security check, toto custom mode