mimimal single user security, starting point