protection against metadata leaking