Only react to messages, otherwise security hole is waiting.