updated secure env limitations