Fix player security loophole