answer security question

Signed-off-by: Jinggit <jingghster@gmail.com>