tighten security schema