security model for employers/insurers