remove obsolete comment about where security considerations go.