small security improvements