all but security and exception handling