Use the security api correctly.