starting to implement security