[update:] start to work on security