added security sketch in comments