production expects me to rescue SecurityError explicitly.