security tweaks