begin adding security restrictions