wip: working security via hash and signature