add logging, flesh out access controls