uses bookmarks for security scope
stashes bookmarks