more secure setup