more on references and their security properties