security bootstrap