first attempt
remove hardcoded config
fix typo
add back the insecure package
fix email for the new format
add a locked in icon