use |= rather than += for bufeq_secure