use a more secure one-liner