begun handling collection security

no more autopublish...