some security on atc and postroute servlet