We usually put the security declaration above the method.