Moved Security "oracle" from utils to it's own (singleton) package, added some comments and assertions,