fix security domain boundary