pretty much everything is working, + security