security working in plain text