create TODO, regarding security measures