step 9 (security) done